CISA Promotes Vulnerability Management Method

CISA has published documentation for Stakeholder-Specific Vulnerability Categorization, a vulnerability management methodology that assesses vulnerabilities and prioritizes remediation efforts, based on: exploitation status, impacts to safety, and prevalence of the affected product in a system.