Integrating vulnerability management with ISMS is a best practice to ensure that none of the new vulnerabilities as a result of changes in the system or evolving threats go unnoticed and unmanaged. Nessus and Qualys offer vulnerability scanning against known vulnerabilities and this is an important step toward vulnerability management.