BROADCASTS.com

All links and images for this episode can be found on CISO Series

Winning at vulnerability management is not a numbers game. It's a tactical exercise of what matters most in your environment. Surprisingly, experts tell us close to two thirds of your vulnerabilities can and should be ignored. Why and which ones are those?

This week\u2019s episode is hosted by me,\xa0David Spark\xa0(@dspark), producer of CISO Series and\xa0Andy Ellis\xa0(@csoandy), operating partner,\xa0YL Ventures. Our sponsored guest is\xa0Ed Bellis\xa0(@ebellis), co-founder and CTO,\xa0Kenna Security\xa0(now a part of\xa0Cisco).

Thanks to our podcast sponsor, Kenna Security

Kenna Security, now part of Cisco, is the pioneer of risk-based management. The Kenna Security Platform enables organizations to work cross-functionally to determine and remediate cyber risks. It leverages machine learning and data science to track and predict real-world exploitations, empowering security teams to focus on what matters most.

\xa0In this episode:

• What type of risk or compliance data should CISA collect for its proposed metrics?
• Which metrics are most valuable to determine the health of a company?
• Why the constant frustration with patch management?
• How often should you be conducting vulnerability scans?