Where do network discovery and vulnerability fit in terms of priority in a security program? I know every organization is going to be different but isn’t this something that should be happening no matter what? I talk with a lot of organizations who have no vulnerability management processes in place, yet they are all interested in cybersecurity. I would love to hear from some of the more seasoned InfoSec and Cyber risk management professionals on this.

Topic

[hoganrich2Participant]

Doing a little market research here…

1) Are network discovery and vulnerability management a high priority within your cyber risk management program?
2) If so, at what point (either size of the company in employees or revenue) did it become a priority?
3) Also, is the main driver regulation (HIPPA, PCI-DSS, etc) or something else?
4) How frequently do you scan assets for vulnerabilities?
5) Do you perform authenticated scans?
6) What do you pay for network discovery and vulnerability management?

[Author]

Replies