Beyond the Patch: Measuring the Unknown in Vulnerability Management

  • Wednesday, 11 Jun 2025 1:30PM EDT (11 Jun 2025 17:30 UTC)
  • Speaker: Jonathan Risto

Vulnerability management is no longer just about finding CVEs and deploying patches—it's about closing the gap between what you know and what you don’t see coming.

In this webcast, we’ll explore how to move beyond traditional VM by incorporating threat detection coverage, machine learning insights, and continuous validation techniques into your exposure management strategy.

We’ll tackle tough questions like: How do you measure success in detecting threats you didn’t even know existed? Can red teaming and BAS reveal gaps your scanners miss? Is machine learning helping—or just adding more noise?

You'll learn how to tie threat intelligence and detection metrics directly into VM workflows to reduce exposure and validate risk reduction. Whether you're building a CTEM-informed VM program or just trying to improve prioritization and visibility, this session will give you practical tools, metrics, and strategies to take your program to the next level.

This webcast supports content from SANS Institute LDR516: Building and Leading Vulnerability Management Programs. To learn more about this course, explore upcoming sessions, and access your FREE preview, click here.