The pace at which vulnerabilities are being discovered is exploding – What began years ago as simply patching applications and operating systems has grown into countless updates that include supply chain solutions, internally-developed applications, open-source code, as well as programming languages and frameworks including Java and .NET. And with threat actors paying attention to these (just as much as you should be), if systems and applications aren’t updated in a timely fashion, the risk of successful misuse increases, putting the organization in potential jeopardy.
The real challenge with vulnerability management isn’t finding the vulnerabilities; it’s about having a mature process in place to confidently manage vulnerability risk within an organization’s requisite timeframe. But in many cases, multiple teams, initiative priorities, a lack of communication, and uncertainty around who’s responsible can put a wrench in your vulnerability management efforts.
What’s needed is a solid framework on which to build a Vulnerability Management program implemented using best practices from seasoned practitioners.
In this real-training-for-free session, Microsoft MVP and cybersecurity expert Nick Cavalancia takes my seat, and will first discuss:
- The growing velocity and complexity of vulnerability management today
- The resulting attack surface risk created without a program in place
- Maturing your Vulnerability Management using the SANS VM Maturity Model
Nick will then be joined by Devin Krugly, Vulnerability and Risk Management Practice Advisor, and Spencer Engleson, Lead Product Manager – SOAR, from RAPID7. Devin will discuss:
- Fundamental challenges oriented around a common VM lifecycle
- Perspectives around why these challenges persist in many organizations
- Best practices that will assist in achieving vulnerability management goals
Spencer will then cover the core issue – the challenge of communication and the need to do so continuously. He will discuss how the use of reporting, automation, collaboration tools, and ticketing systems can all be used to improve communication and speed up remediation actions.
This real training for free event will be jam packed with technical detail and real-world application. Register today!