Vulnerabilities can be problems in configurations, missing patches, software that was loaded on a machine that shouldn’t be there. Eric Maiwald says vulnerability management should be how an organization identifies, classifies, prioritizes, deals with these exceptions due to business requirements. Some products out there scan for known bugs and don’t detect human error in system configurations, he says. The missing link is an integrated vulnerability tool that not only finds holes, but gauges the risk as well, he adds.”]
Source: https://www.darkreading.com/analytics/vulnerability-management-grows-up