I'm confuse for some related articles mentions that the Vulnerability Management have the Audit process. While, As I know Audit is complete separate audit.Another question what is the most recommended free open source for both of them? Thank you in Advance
I suggest that you read the following book. It focuses on vulnerability management with some references to audit:
Vulnerability management
P Foreman - 2009 - content.taylorfrancis.com
Well what u mean by audit, general or only IT audit; there are 6 types of audit; process, it, performance, fraud, finance and relevance. In each auditor investigates the risks. İt auditon is almost same as valnurabity management, auditor must get special education for IT. We can say auditor finds the risks about valnurability and gaves proposal for managers do to companies risk appetites. Auditor dont have authority to give desicions in place of managers. Generally companies have IT departments instead of valnurability managers and auditors do the valnurability proposals. Valnurability managers just manage, gave the decissşın to
Gave the decission to how to continue risky process of valnurability.
- Badges
- Science topic
- Similar topics
- Philosophy
- Moral Philosophy
- Free Will