A network monitoring or vulnerability scanning solution can be difficult to sell to customers. It can take up to 6 months to confirm the reliability of the data feed, assess trends and agree standard benchmarks for what constitutes a critical vulnerability. But it can take 18 months to fix problems found and youre still only going to REDUCE the number of successful cyber-attacks and infections. Ill take your word for it. How soon after its installed will I know what needs to be fixed?”]
Source: https://informationsecuritybuzz.com/articles/dont-know-dont-know/