Episode 7

Vulnerability Management – What? When? How?

What qualifies a risk as acceptable or not? When should confirmed vulns be fixed by? Perhaps most distressingly, how do we know when a vulnerability has actually been remediated? Vulnerability Management looks different from business to business, but some things are common musts:

A workflow framework that security & dev agree on
Live critical finding notifications
Active remediation monitoring
Visibility throughout ticket lifecycles "from soup to nuts"

Resources

View Transcript

Google Podcasts

Further listening

Understanding AppSec Part 3: Testing Your Code – DAST, Pentesting and Red Teaming

Understanding AppSec Part 2: Getting Your Code to the Cloud – IAC, Container Security, CSPM

Understanding AppSec Part 1: Securing Your Code – SCA and SAST

Scaling AppSec to Secure the Smallest Doors and the Biggest Buildings

Subscribe for updates

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.