Vulnerability management lives inside a larger risk management program. Risk is the combination of the likelihood that a threat exploits a vulnerability and the impact if it does. Your scanner may report thousands of findings, but the organization has limited money, staff and maintenance time, so not every risk can or should be eliminated. The exam expects you to know the four standard risk responses, who is allowed to choose them, and the practical obstacles, called inhibitors to remediation, that delay fixes even when everyone agrees a fix is needed.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.