ABSTRACT

Vulnerability management is the detailed, cyclical process of identifying and remediating weaknesses in an information technology system. It includes skills, processes, standards, and technologies combined to appropriately address the most relevant vulnerabilities in the target environment. While many standards and technologies exist, their selection and application are unique to the organization and threat environment.