Vulnerability assessment
Vulnerability assessment is a methodology used to determine whether an exploitable weakness exists on an information system. This is important to stress as vulnerability assessment is not a tool. While performing a vulnerability assessment, you will use many tools. While good tools are required for a successful vulnerability assessment, it is the skill of the tester and the adherence to process that ensures a high-quality vulnerability assessment.
Business relationship with vulnerability assessment
The vulnerability assessment that you perform will most likely find hundreds of vulnerabilities in your environment and could very easily find thousands. The modern information system, due to its complexity and the fact that software is not designed in a secure manner, will develop many vulnerabilities over time. Without an effective means of triaging the vulnerabilities that you discover, you may find it very difficult to effectively secure your organization. Understanding...