From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Vulnerability metrics

Vulnerability metrics

From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Start my 1-month free trial Buy for my team

Vulnerability metrics

“

- [Instructor] When it comes to measuring the effectiveness of your vulnerability management program, there are four important things that CompTIA wants you to know as you prepare for the CySA+ exam. First, you should monitor trends in vulnerabilities. Are the same vulnerabilities arising over and over again? Is your ability to detect and quickly remediate vulnerabilities improving over time? Keep an eye on the metrics that demonstrate the health of your vulnerability management program. Second, how are you performing against lists of common vulnerabilities, such as the OWASP Top 10 list? Are developers and system administrators improving their skills over time or are they making the same mistakes repeatedly? Third, do you pay particular attention to critical vulnerabilities and zero-day threats? You want to be sure that you're taking the most important issues and addressing them as quickly as possible. Finally, are you meeting all the service-level objectives that you define for your…

Contents