There May Be a Ceiling on Vulnerability Remediation

There May Be a Ceiling on Vulnerability Remediation
Most organizations are doing all they can to keep up with the release of vulnerabilities, new research shows.

Security has no shortage of metrics β€” everything from the number of vulnerabilities and attacks to the number of bytes per second in a denial-of-service attack. Now a new report focuses on how long it takes organizations to remediate vulnerabilities in their systems β€” and just how many of the vulnerabilities they face they’re actually able to fix.

The report, “Prioritization to Prediction Volume 3: Winning the Remediation Race,” by Kenna Security and the Cyentia Institute, contains both discouraging and surprising findings.

Among the discouraging findings are statistics that show companies have the capacity to close only about 10% all the vulnerabilities on their networks. This percentage doesn’t change much by company size.

https://www.darkreading.com/vulnerabilities—threats/there-may-be-a-ceiling-on-vulnerability-remediation/d/d-id/1334142


Source: DRJ New feed

Share: