Webinar 7: Technical Vulnerability Management

Vulnerabilities provide opportunities for threat actors (adversaries) to compromise the  confidentiality, integrity or availability of mission-critical systems. These vulnerabilities, when exploited, allow the adversary to complete activities within their attack campaign and/or accomplish their goal. Vulnerabilities exist within critical information infrastructures at many levels including information, assets, networks, applications and devices as well as within the operational and procedural elements specific to personnel. The identification and management of cyber vulnerability is critical to an organization’s risk management process since it allows them to identify, analyse and prioritize specific areas of weakness that can be used by an adversary to target and attack mission-critical systems. In this course the student will be introduced to the broad range of vulnerabilities that can exist within an organization, learn how those vulnerabilities contribute to cyber risk and how to evaluate, prioritize and mitigate those vulnerabilities. Students will learn how seemingly disparate and unrelated vulnerabilities can contribute to the adversary attack plan and how the identification, management and mitigation of those vulnerabilities can greatly improve the organizational cyber risk profile.