The Vulnerability Management Episode

Description

KirkpatrickPrice is on a mission to help 10,000 people elevate the standards for cybersecurity and compliance. Join Our Cybersecurity Mission: https://www.linkedin.com/showcase/our-cybersecurity-mission

Jeff Pochily’s background

https://www.linkedin.com/in/jeffreypochily/

Vulnerability Databases

https://nvd.nist.gov

Open Bug Bounty Security Researchers

https://www.openbugbounty.org/researchers/top/

Recommended vulnerability management controls

Documented vulnerability management policies and procedures
Assignment of responsibility for vulnerability management to a qualified resource
Vulnerability assessment during development
Code reviews for secure coding compliance and software vulnerabilities
Ranking security vulnerabilities by impact
Documented asset inventory
Documented inventory of bespoke and custom software, and third-party software components
Consistent patch management process
Subscription to vulnerability notification services
Manual or automated application vulnerability assessment methods
Consistently update container deployment tools and images
Internal vulnerability scans
External vulnerability scans
Internal penetration testing
External penetration testing
Application penetration testing
Consistent remediation process for scan and pen test findings

KirkpatrickPrice scripts to check your systems

https://github.com/orgs/kirkpatrickprice/repositories

Cybersecurity & Infrastructure Security Agency

https://www.cisa.gov/topics/cyber-threats-and-advisories