-: Welcome to domain two, vulnerability management.
Now, in this section, we're gonna start off
by talking about the requirements that are needed
to conduct vulnerability scans.
There's legislative requirements,
and there's corporate requirements.
We'll talk about both of those.
We'll then talk about how you decide
what targets you're gonna scan in the first place.
Do you scan the entire network or just portions of it,
and why do you decide each piece?
We're then gonna talk about the scan frequency.
Should I conduct daily scans, weekly scans,
monthly scans, yearly scans?
We'll cover all that in this section.
And then we're gonna talk about
how we can customize those scans
to meet different policy or legislative requirements.
Next, we're gonna move on to how
you maintain your scanning tools
because like any other piece of software,
there is a requirement to do upgrades
and patches and security testing of those tools.
Then, we're gonna start talking about
how we remediate those scan findings.
So once you've run this scan on your network
and you've got hundreds or thousands of vulnerabilities,
how do you decide which ones to fix first?
We'll talk all about that and how
those different vulnerabilities are scored and rated.
Then we're gonna talk about how you can prioritize
your remediation efforts based on those scores
to maximize your use of limited resources.
And then finally, we're gonna talk about
how you can overcome objections
to actually patching and upgrading things
from the rest of the technology team
because you're gonna find that
in the IT world, there's kinda two sides.
There's the system administrators, who are responsible
for running and operating the system,
and then there's the security staff,
which is who we're talking about, right.
We're talking about cyber security analysts here
and sometimes, there's friction between the two.
How do you overcome that and how do you get the stuff
you need done when the administrators don't want you to?
We're gonna talk about that in this course as well.
So, before we get started, what is vulnerability management?
Well, it's the identification, prioritization,
and remediation of vulnerabilities
before a threat can exploit them.
Simply put, it's things like scanning your network
and patching your network before
the bad guys can exploit that vulnerability.
Now, you have to have an organized approach
to scanning your network and a continual assessment
of your organizational security posture,
and that's what vulnerability management programs give you.
We're gonna talk about all of that
as we move forward here in the course.
So the bottom line is in this section,
we're gonna give you a high-level understanding
of how you can develop vulnerability
management programs for your organization.
And, we're gonna talk about how you can
analyze the scans so you can best
secure your organization's networks.
And at the end of all this, I'm gonna even
walk you through a demonstration of using
a vulnerability management tool and how
to read those reports in our lab session.
So, let's get started.