Chris Hughes, Author of Effective Vulnerability Management

Chris Hughes, Author of Effective Vulnerability Management

From Unsolicited Response by Dale Peterson: ICS Security Catalyst and S4 Conference Chair

May 15, 2024 · 44 min · Season 2024 · Episode 7

About this episode

Dale Peterson interviews Chris Hughes about their book Effective Vulnerability Management and discusses various aspects of vulnerability management in organizations.

Chris Hughes and Nikki Robinson recently wrote the book Effective Vulnerability Management. Dale and Chris discuss the topic and book including: The definition and scope of vulnerabilities. It's much more than coding errors that need patches. Are ICS protocols lacking authentication "vulnerabilities" The reality that most organizations have 100's of thousands of unpatched vulnerabilities. Some statistics and will this change. Ways to prioritize what vulnerabilities you address. The SSVC decision tree approach that was introduced at S4 as Never, Next, Now Tooling … vulnerability management, software configuration, ticketing, remediation. And much more. Links: Effective Vulnerability Management, https://www.amazon.com/Effective-Vulnerability-Management-Vulnerable-Ecosystem/dp/1394221207/ Dale's ICS-Patch Decision Tree, https://dale-peterson.com/wp-content/uploads/2020/10/ICS-Patch-0_1.pdf

People in this episode

Guest: Chris Hughes

Topics covered

  • vulnerability management
  • ICS protocols
  • unpatched vulnerabilities
  • prioritization of vulnerabilities
  • SSVC decision tree
  • tooling

Keywords

  • coding errors
  • authentication vulnerabilities
  • statistics on vulnerabilities
  • remediation

Mentioned in this episode

Products: Effective Vulnerability Management, ICS-Patch Decision Tree

Books & works: Effective Vulnerability Management

More episodes of Unsolicited Response

Explore listener stats, chart rankings, contacts and more on the Unsolicited Response podcast page.