Identifying known vulnerabilities means action can be taken to mitigate risks. A vulnerability is defined in the ISO 27002 standard as “A weakness of an asset or group of assets that can be exploited by one or more threats”. Vulnerability management is the process in which vulnerabilities in IT are identified and the risks of these vulnerabilities are evaluated.

It is not enough to have a patching policy alone. You can’t be sure you have addressed everything unless you check, so independent verification is a valuable asset to have. The average enterprise can only patch 10% of their vulnerabilities in a month. Secure IPX ensures you handle the ones that matter most.

There are two primary options:

1. External Vulnerability scanning – required by compliance to be carried out Monthly/Quarterly, your Public facing services are checked for known vulnerabilities, so you can take action to address known compromises.

2. Internal Vulnerability scanning – required by compliance, internal scans are carried out monthly to identify vulnerable applications essential to help mitigate compromises.

Secure IPX are here to advice the best way forward for your organisation through the use of innovative tools.