Identify scan targets

- [Instructor] When you're getting … a vulnerability management program under way, … one of your very first steps is to develop … the requirements for that program. … You've thought through whether the program … was based on a general desire to improve security, … a response to regulatory requirements, … or a reaction to the corporate policy. … Once you've done that, … you're next step is to turn those general requirements … into a list of specific systems and networks … that you want to scan. … In order to create this list, … you need to have an asset inventory that you can trust. … If your organization practices … good asset management already, … you may find that you already have this inventory ready … to draw into your vulnerability management program. … You might find … that your organization's configuration management tools … already have a complete inventory … of systems and devices on your network. … And, in the best case, … that the inventory is kept up to date … with information from regular network scans. …