Seeking Advice on Enhancing Vulnerability Management Strategies

Hello r/Cybersecurity,

I'm reaching out to this knowledgeable community for advice on improving our vulnerability management process.

Here are a few specifics about our current setup:

* Organization Size: 600-700 employees
* Industry: Healthcare
* Current Tools: Tenable (previously Tenable.io)

* Current Processes:

* Global Host Discovery Scan: A weekly ping scan (unauthenticated).
* Server Scans: Agents are installed on all Windows/Linux servers. These receive weekly scans based on relevant plugins, with each environment scheduled for a different day of the week. These scans are authenticated using the agent.
* Network Appliances/agentless servers: Remote authenticated scans are performed weekly.






We are considering implementing a global vulnerability scan to gather comprehensive information on operating systems and installed software.

We also use automated tagging rules to categorize specific hosts, which helps in filtering for reporting purposes.

How does your guys Vulnerability Management look like?

Are there people using tenable and have some advice?

Any insights, experiences, or resources you can share would be greatly appreciated. I'm especially interested in hearing about specific tools or techniques that have made a significant impact on your vulnerability management process.

Thank you in advance for your help! submitted by /u/Conscious_Mixture563
[link] [comments]


http://dlvr.it/T9WF6J