Preparation for vulnerability analysis and resolution activities is conducted.
The assets and operational environments that must be examined for vulnerabilities are identified.
An operational vulnerability analysis and resolution strategy is established and maintained.
A process for identifying and analyzing vulnerabilities is established and maintained.
The sources of vulnerability information are identified.
A process is established to actively discover vulnerabilities.
Vulnerabilities are analyzed to determine whether they have to be reduced or eliminated.
Strategies are developed to manage exposure to identified vulnerabilities.
Strategies are developed and implemented to manage exposure to identified vulnerabilities.
The root causes of vulnerabilities are examined to improve vulnerability analysis and resolution and reduce organizational exposure.
Passcode