1. What criteria do vulnerabilities use?

9.1 Common Vulnerabilities and Exposures (CVE)

Open Vulnerability and Assessment Language (OVAL)

Common Vulnerability Scoring System (CVSS)

2. Vulnerability management methodology

Overview of Vulnerability Management

Purpose, Scope, Roles and Responsibilities, Procedures

Workflows for vulnerability issues

Remediations SLAs

Schedule for Vulnerability Scanning