From the course: Vulnerability Management: Assessing the Risks with CVSS v3.1

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Using CVSS scoring in the enterprise

Using CVSS scoring in the enterprise

From the course: Vulnerability Management: Assessing the Risks with CVSS v3.1

Start my 1-month free trial

Using CVSS scoring in the enterprise

- [Instructor] Once you understand CVSS scores, the fun part is putting those scores to work in your environment, then you can start making things more secure, or less vulnerable if you're super paranoid like me and want to be a little more technical about it. You might be lucky and have tools, either a sophisticated vulnerability scan engine, or a threat and vulnerability management platform that can help you automate some of the hard work of prioritizing vulnerability remediation. But many of us just have to roll up our sleeves and do the hard work ourselves. Well, let's go back to the Red 30 network and talk about how its makeup can impact vulnerability risk. In our DMZ, all of Red 30's, customer facing applications like the web page and eCommerce site are exposed to the internet because why else would they exist if not to be publicly accessible? These applications probably don't store any sensitive data on the exposed…

Contents