Why Threat Intel is Essential for Vulnerability Management with Patrick Garrity
GRC Academy30 Apr 2024

Why Threat Intel is Essential for Vulnerability Management with Patrick Garrity

In this episode, Jacob speaks with cybersecurity researcher Patrick Garrity!

Patrick Garrity is a seasoned security researcher at VulnCheck where he focuses on vulnerabilities, vulnerability exploitation and threat actors.

In this episode they discuss the importance of integrating threat intelligence into vulnerability management using the Exploit Prediction Scoring System (EPSS), CISA Known Exploited Vulnerabilities Catalog, and the changes in CVSS 4.0!

Here are some highlights from the episode:

  • How Exploit Prediction Scoring System (EPSS) can predict exploitation
  • How vulnerability scanners integrate EPSS
  • CISA's Known Exploited Vulnerabilities (KEV) Catalog
  • The national security implications of vulnerability management

Follow Patrick on LinkedIn: https://www.linkedin.com/in/patrickmgarrity/

VulnCheck Website: https://vulncheck.com/

Thanks to our sponsor Keeper Security!

Need a FedRAMP authorized Password Manager? See how Keeper can help you comply with CMMC: https://www.keepersecurity.com/cmmc/?utm_source=grcacademy&utm_medium=display&utm_campaign=cmmc_video

Start a free 14-day trial of Keeper: https://grcacademy.io/ref/keeper/b2b-trial/

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Online GRC Training: https://grcacademy.io/courses/?utm_source=podcast&utm_medium=s1-e22&utm_campaign=courses

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(55)

Deltek's Journey to FedRAMP Moderate Equivalency

Deltek's Journey to FedRAMP Moderate Equivalency

I have a surprise for you --- the last GRC Academy podcast!In this last episode, Michael Greenman from Deltek shares the journey to FedRAMP Moderate Equivalency for Deltek Costpoint GovCon Cloud Moder...

18 Nov 202536min

What's Next for GRC Academy and Jacob Hill

What's Next for GRC Academy and Jacob Hill

I have an incredible announcement to share! 👀Before that though, let me share some of my history with you.Back in 2016, I started a side-business called TEKFused LLC focused on web design/hosting.Fas...

4 Sep 20253min

The Business Case for CMMC - Surviving DOGE

The Business Case for CMMC - Surviving DOGE

CMMC certification could be the key to surviving DOGE cuts! 👀In this episode, I’m joined by Derek Kernus of Aethon Security to discuss the business case for CMMC!This episode was really refreshing to...

19 Jun 202552min

The Compliance Playbook to Cybersecurity

The Compliance Playbook to Cybersecurity

"Compliance is the security referee - frameworks are the playbooks."In this episode, I’m joined by Tim Golden, Founder of Compliance Scorecard, to unpack the misunderstood, and mission-critical world ...

5 Jun 202531min

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

How HITRUST Fixes What’s Broken in Cybersecurity Compliance

Cybersecurity frameworks can learn a lot from HITRUST.In this episode, Ryan Patrick of HITRUST explains how HITRUST approaches the assurance problem, from centralizing the certification process to fre...

27 Mai 202555min

CUI Masterclass with Ryan Bonner

CUI Masterclass with Ryan Bonner

"Outread the others" - that's how Ryan Bonner mastered CUI.If you're confused about Controlled Unclassified Information (CUI) - you're not alone. Many defense contractors (not to mention DoD themselve...

9 Mai 202551min

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

Small Business Achieves CMMC Level 2 Certification: Reynolds Construction's DIY Success Story

HR guy leads his company to CMMC level 2 certification! 👀In this episode I’m joined by Eric Fields of Reynolds Construction to learn how he led his business to CMMC level 2 certification!I call him "...

24 Apr 202536min

The FASTEST Way to CMMC Compliance - CUI Enclaves

The FASTEST Way to CMMC Compliance - CUI Enclaves

CMMC rolls out in a few months and there are STILL companies who are JUST getting started!In this episode I’m joined by Daniel Akridge of Summit 7 to talk about the real challenges facing the Defense ...

10 Apr 202558min

Populært innen Teknologi

lydartikler-fra-aftenposten
teknisk-sett
nasjonal-sikkerhetsmyndighet-nsm
teknologi-og-mennesker
energi-og-klima
rss-snakk-om-sikkerhet
rss-kunstig-intelligens-med-elisabeth-maren-og-morten
rss-ai-forklart
shifter
rss-polypod
tomprat-med-gunnar-tjomlid
rss-heis
rss-alt-som-gar-pa-strom
elektropodden
fornybaren
rss-ki-praten
rss-digital-dros
rss-bits-and-bytes-for-advokater
pedagogisk-intelligens
rss-alt-vi-kan