Best practices in vulnerability management include regular vulnerability scanning of internal and external networks and any web applications or mobile applications in your organization regardless of where hosted, the automated updating of workstations and servers with patches, developing and maintaining a robust information security program. This includes enforced policies and procedures used and held, such as a disaster recovery plan that provides recovery-time-objectives for systems and applications, an incident response plan, user training, and a regular plan with milestones for maintaining adequate security.