دانلود کتاب مدیریت آسیب پذیری مدرن – امنیت سایبری پیش بینی کننده

I became closely involved with the field of vulnerability management when I was a Gartner analyst starting in 2011. Immediately a few things became obvious to me, as I started speaking with clients and industry connections, as well as with vendors involved in the entire vulnerability management process. First, this is an area where many practices and processes seemed to have originated in the 1990s and are modernizing very slowly, even today. Second, this is connected to the fact that vulnerabilities, their exploitation, mitigation, and remediation—such as patching—involve a complex web of security issues as well as operational and business issues. Third, this area struck me as the best example where security teams and other IT teams have frictions, arguments, and sometimes outright fights. I’ve long used this domain as the best example of fears, arguments, and battles between the silos within IT—and outside as well. (Security: “We need to fix it.” IT: “This is too hard.” Business: “Just accept the risk.”)