Definition
Vulnerability Management is the continuous process of identifying, assessing, prioritising and reducing Vulnerabilities in systems, devices and applications.
Human Explanation
An organisation regularly examines its systems to find weaknesses and address them before they are exploited.
Why it Matters
Effective Vulnerability Management reduces Incident Risk and supports informed planning of corrective actions.
Conceptual Boundary
Vulnerability Management is not limited to running security scans. It covers the complete process from discovery to verified remediation or conscious Risk acceptance.
Practical Perspective
Not every Vulnerability has the same priority. Action should reflect its Risk and the importance of the affected Assets.