Managing Accepted Vulnerabilities

The discovery of new vulnerabilities occurs every day and organizations that follow good security practices remediate these vulnerabilities as soon as possible. Good security practices could be using automated patching tools, making a configuration change, or by implementing other security controls toreduce the risk, these vulnerabilities pose. However, when an organization has avulnerability they cannot remediate, they need to have a process for inventorying,tracking, reviewing, and reporting on open vulnerabilities until they are fullyremediated.