CISSP - Security Operations - Section 7.8

Implement and support patch and vulnerability management.

Implement patch management and vulnerability management processes that cover discovery, prioritisation, testing, and deployment of patches within defined remediation timelines. Distinguish between vulnerability management (identifying and tracking weaknesses) and patch management (deploying vendor-supplied fixes) so that the correct workflow applies to each finding.

Examworthy is not affiliated with or endorsed by (ISC)2. Original, blueprint-aligned practice material only.