Every organization has more vulnerabilities than it can fix immediately, so prioritization decides where effort goes first. Good prioritization combines three views: how severe a vulnerability is in general, how likely it is to be exploited, and how much it matters in your particular environment. An analyst who sorts a scan report by severity score alone will often spend the week on the wrong problems.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.