Stakeholder Specific Vulnerability Categorization (SSVC) and decision trees
Learn how Stakeholder Specific Vulnerability Categorization (SSVC) and decision trees can help provide more effective vulnerability prioritization outcomes.
In this video on SSVC, I cover:
1. The foundation of SSVC, created by Jonathan (Jono) Spring and a team of researchers at the Software Engineering Institute | Carnegie Mellon University.
2. An overview of the Cybersecurity and Infrastructure Security Agency's adoption of SSVC.
3. A breakdown of the guide I created on "How to Automate Vulnerability Prioritization using SSVC."
4. An overview of Chris Madden's Security Security BSides Dublin talk and the real-world implementation of SSVC.
If you're interested in diving deeper into SSVC, I have organized a roundtable discussion next month featuring Stephen Shaffer, a special guest whose name will be announced soon, and of course, I'll be there too! Feel free to join us by registering here: https://nucleussec.com/webinar/using-...
#cybersecurity #infosecurity #riskmanagement #ssvc #vulnerabilitymanagement #cisa #security #securityoperations
