Vulnerability Management: Essential Components
Fraud Management & Cybercrime
,
Fraud Risk Management
,
Governance & Risk Management
Steve Yurich, CISO of Penn National Insurance, on the Need for Frequent Scanning
Effective vulnerability management requires more frequent scanning of infrastructure, says Steve Yurich, CISO at Penn National Insurance.
See Also: Live Webinar | Software Security: Prescriptive vs. Descriptive
“A large number of breaches occur where vulnerabilities have existed for more than three months,” he says. “We have a large internal network with a lot of devices. We set up an internal scanning of the infrastructure that we do on a monthly basis. We have also established a process to engage with different app teams for scanning.”
In a video interview with Information Security Media Group, Yurich also discusses:
- His organization’s vulnerability management process;
- Why vulnerability management is far more than a one-time process;
- Top recommendations for establishing an effective vulnerability management program.
Yurich, CISO at Penn National Insurance, has run cybersecurity programs for government and private entities. He is a Certified Information Systems Security Professional, or CISSP, and is Certified in Risk and Information Systems Control, or CRISC.
