Vital Signs

In cybersecurity, a vulnerability is a weakness in a system, process, or control that a threat could exploit. This post explains how vulnerabilities relate to threats and risk, how CVE identifiers and CVSS scores help organizations prioritize, why patching is hard in hospitals, and how compensating controls protect devices that cannot be updated.