Vulnerability Assessment
What is Vulnerability Assessment?
A systematic process of identifying, quantifying, and prioritising security vulnerabilities in systems, applications, and networks.
Related terms
Frameworks that govern vulnerability assessment
What the standards actually require on vulnerability assessment
Requirements naming vulnerability assessment across 6 standards, quoted from the control text.
Run vulnerability assessments and penetration tests regularly, considering risk and system importance, under procedures that set scope (including devices directly connected externally such as VPN appliances), frequency, timing (including before release) and pr...
japan-fsa-cybersecurity-guidelines-for-financial-institutions::2.2.4-B · 2.2.4 Vulnerability assessment and penetration testing: basic actions →Agencies should perform vulnerability assessments to set a baseline, and should do so: before a system is used for the first time; following any significant incident; following a significant change to the system;
new-zealand-information-security-manual-nzism::6.2.5.C.01 · 6.2.5.C.01 Baseline vulnerability assessments and their triggers →Vulnerability assessments define, identify and classify vulnerabilities in computers, networks and communications infrastructure with scanners and tools that search for known vulnerabilities and classes and for conformance with approved configurations, at a fr...
ffiec-it-examination-handbook::IS-IV.A.2(c) · IV.A.2(c) Vulnerability Assessments (Information Security) →At least once every 15 calendar months, conduct a paper or active vulnerability assessment.
nerc-cip::CIP-010 R3.1 · CIP-010-4 R3.1: Vulnerability assessment every 15 calendar months →An SVA (one of the risk assessment methodologies an operator may choose) supports identifying, evaluating and prioritizing risks and selecting measures for critical facilities, usually through asset characterization (hazards, consequences, surroundings, suppor...
tsa-pipeline-security::4.3 · 4.3 Security vulnerability assessment (SVA) →Vulnerability assessments are performed by parties independent of the function's operations to give an objective view.
australian-energy-sector-cyber-security-framework-aescsf::THREAT-1k · THREAT-1k: Independent vulnerability assessments →Questions people ask about vulnerability assessment
What is Vulnerability Assessment?
Why is Vulnerability Assessment important for compliance?
What concepts are related to Vulnerability Assessment?
Which compliance frameworks address Vulnerability Assessment?
Where can I learn more about Vulnerability Assessment?
See how Vulnerability Assessment applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.