Full course coming soon

Vulnerability Management and Risk-Based Patching

7 chapters · 31 lessons

1. 1. Building and Maintaining Asset Inventories

   4 lessons

   Learn to discover, catalog, and continuously update the systems, services, and dependencies that form your attack surface.

2. 2. Collecting and Normalizing Vulnerability Data

   4 lessons

   Aggregate vulnerability information from scanners, advisories, threat feeds, and internal testing into a unified view.

3. 3. Risk-Based Prioritization Beyond CVSS Scores

   5 lessons

   Rank vulnerabilities using exploitability, exposure, threat activity, and business impact rather than severity alone.

4. 4. Designing Remediation Workflows and Patch Cycles

   5 lessons

   Coordinate patching, configuration changes, and compensating controls across teams while minimizing service disruption.

5. 5. Verification and Measuring Program Effectiveness

   4 lessons

   Confirm that fixes are deployed correctly and track metrics that demonstrate risk reduction over time.

6. 6. Vulnerability Management in Cloud and Container Environments

   4 lessons

   Extend vulnerability management practices to ephemeral infrastructure, container images, and infrastructure as code.

7. 7. Vulnerability Management for AI-Enabled Systems

   5 lessons

   Apply vulnerability management principles to model endpoints, retrieval systems, and AI-specific attack surfaces.