Problem
One of the most important concepts in cybersecurity is that not all vulnerabilities can easily be patched or remediated. Sometimes it takes a village to ensure remediation is complete. A risk-based approach to vulnerability and patch management is a decision all organizations must face.
I. Thoroughly compare and contrast change management vs patch management as it applies to vulnerability management and remediation.
II. What is patch management?
III. What is change control/management?
IV. What does the vulnerability management process entail?
V. What are some potential business impacts of patching a new vulnerability outside the normal change management process?
VI. If escalation occurs, thoroughly explain the following steps for an escalation point.