Effective Vulnerability Management

Infuse efficiency into risk mitigation practices by optimising resource use with the latest best practices in vulnerability management.

Organisations spend tremendous time and resources addressing vulnerabilities to their technology, software, and systems. But are those time and resources well spent? Often, the answer is no, because we rely on outdated practices and inefficient, scattershot approaches. Effective Vulnerability Management takes a fresh look at a core component of cybersecurity, revealing the practices, processes, and tools that can enable today's organisations to mitigate risk efficiently and expediently in the era of Cloud, DevSecOps, and Zero Trust.

Every organisation now relies on third-party software and services, ever-changing cloud technologies, and business practices that introduce tremendous potential for risk, requiring constant vigilance. It's more crucial than ever for organisations to successfully minimise the risk to the rest of the organisation's success. This book describes the assessment, planning, monitoring, and resource allocation tasks each company must undertake for successful vulnerability management. It enables readers to eliminate unnecessary steps, streamlining the process of securing organisational data and operations. It also covers key emerging domains such as software supply chain security and human factors in cybersecurity.

• Learn the important difference between asset management, patch management, and vulnerability management and how they need to function cohesively.
• Build a real-time understanding of risk through secure configuration and continuous monitoring.
• Implement best practices like vulnerability scoring, prioritisation, and design interactions to reduce risks from human psychology and behaviours.
• Discover new types of attacks like vulnerability chaining, and find out how to secure your assets against them.

Effective Vulnerability Management is a new and essential volume for executives, risk programme leaders, engineers, systems administrators, and anyone involved in managing systems and software in our modern digitally-driven society.