Shifting from operational to risk-based response to vulnerabilities and exposures

Chris Goettl
Additional contact information
Chris Goettl: Ivanti, USA

Cyber Security: A Peer-Reviewed Journal, 2025, vol. 8, issue 4, 361-374

Abstract: Exploited vulnerabilities and zero-day exploits continue to increase in frequency and are expected to accelerate further. This paper evaluates the increase in exploited vulnerabilities and outlines the five most common challenges organisations encounter when remediating vulnerabilities quickly. By understanding the challenges organisations face, the paper identifies solutions and discusses improvements to help increase responsiveness and reduce exposure time. Some of the challenges are organisational and political. Others are more process and technical oriented. The proposed solutions include a combination of people, process and technology to improve organisations’ ability to respond to exploited or high-risk vulnerabilities in faster and more targeted ways, as opposed to trying to resolve all vulnerabilities. The paper proposes effective solutions organisations can use to improve their vulnerability remediation process and their ability to respond to exposures quickly, effectively and with measurable progress.

Keywords: zero-day exploit; risk-based remediation; vulnerability response; ring deployment; generative AI (search for similar items in EconPapers)
JEL-codes: M15 (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/9216/download/ (application/pdf)
https://hstalks.com/article/9216/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:csj000:y:2025:v:8:i:4:p:361-374

Access Statistics for this article

More articles in Cyber Security: A Peer-Reviewed Journal from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().