Communicate Vulnerability Information

---

Goals

• Understand vulnerability reporting concepts.
• Explore reporting best practices.
• Review Key Performance Indicators (KPI).
• Explore the role of action plans.
• Understand inhibitors to remediation.

Explaining Effective Communication Concepts

• Vulnerability Management Reporting
• Vulnerability Report Best Practices
• Key Performance Indicators (KPIs)

Understanding Vulnerability Reporting Outcomes and Action Plans

• Action Plan
• Inhibitors to Vulnerability Remediation
  • Memorandum of Understanding (MOU)
  • Service Level Agreement (SLA)
  • Organizational Governance
  • Business process interruption
  • Degraded functionality
    • occurs when system performance decreases due to various factors
      • e.g., environmental changes, age, lack of maintenance, and sometimes from applying security patches, a design flaw, lack of resources, or inadequate testing
  • Legacy systems
  • Proprietary Systems