Session Code: BRE2192

Presenter(s): David SooHoo

Company(s): Recorded Future

Abstract: Vulnerability management teams deal with hundreds of applications that can vary by department and individual — each with its own version and potential vulnerabilities. In this session, Recorded Future vulnerability management expert David SooHoo discusses best practices for developing a threat-based vulnerability prioritization program. You’ll learn how to continuously monitoring for new vulnerabilities in the tech stack and also: Reduce risk by prioritizing patching based on threat severity Minimize expensive off-cycle patches with real-time context Respond quickly with transparency and context