Rethinking Vulnerability Management as AI Goes Wild: Practical Recommendations for Modernizing Your Program and Staying Calm

Rethinking Vulnerability Management as AI Goes Wild: Practical Recommendations for Modernizing Your Program and Staying Calm

Vulnerability and patch management are in a tight spot. AI capabilities are both accelerating and scaling vulnerability discovery and exploitation. Even the most aggressive patching SLAs will never be quick enough to prevent exploits against zero days, and manual processes will never keep pace with automated attacks. Plus, a significant percentage of successfully exploited vulnerabilities exist in systems that should have been shut down and replaced years ago. In this symposium, IANS Faculty Adrian Sanabria shares recommendations on how to modernize vulnerability management, patch management and other adjacent supporting processes.

• Address asset management gaps: Why the CMDB that never gets updated or finished is holding vulnerability management back
• Think about patching speed: Is moving faster essential or does it create unnecessary risks?
• Reduce the pressure on vulnerability/patch management through hardening and mitigation (including permanently migrating off legacy software and protocols)
• Leverage Mythos and other scary AI headlines to get budget, resources and attention to make an impact
• Implement a modern vulnerability prioritization methodology that decreases dependency on CVE, NVD and other unreliable vulnerability intelligence sources, compares intelligence-driven vs. scan-driven approaches, and considers AI-driven capabilities

Audience

This event is for IANS clients and invited guests — there is no vendor sponsorship or presence.