Enterprise Vulnerability Management and Its Role in Information Security Management

Abstract

Abstract Companies continue to pay heavily for confronting hacker attacks and responding to rapidly spreading viruses, worms, and Trojans. The impact on an organization can be substantial, ranging from loss of productivity to reputation. Hackers exploit known vulnerabilities. Hybrid malcode not only piggybacks on core services for delivery, but also exploits known vulnerabilities. This article underscores the central role of vulnerability management in ensuring enterprise security. An effective vulnerability management program will not only guard against hackers, but will also assure minimal impact from hybrid malcode that exploits known vulnerabilities.