Vulnerability management documents, overview, assessment and guides

Articles to support your decisions.

DORA, the CRA, NIS2, CVSS, backports, deployed versions and business value: practical guidance for monitoring components, assessing vulnerabilities and managing treatment.

Explore our insights

Introducing CyberLifeCycle

Vulnerability management from a leadership perspective.

The vulnerability management service run by CyberLifeCycle, its benefits for leadership and the deliverables used to track software risks.

View our overview Explore the approach online

Three practical guides

Three starting points for your process.

Prioritise an alert, use an SBOM and plan for end of support.

3 resources

Vulnerability management5 min

Prioritising vulnerabilities: start with your context

Check affected systems, choose a feasible action and track it through closure.

Read article

SBOMs & components4 min

A useful SBOM starts with a clear scope

Questions to ask before generating and collecting software component inventories.

Read article

Software lifecycle4 min

Plan for end of support before it becomes urgent

Build deadline tracking that leads to maintenance and migration decisions.

Read article

Free assessment · For IT & security teams

How well do you track vulnerabilities and end of support?

Answer 15 questions online in under five minutes. You get your score, your priorities and a 30-day action plan.

15 checkpoints, from inventory to management.
Priorities and first actions based on your answers.
A practical plan for your next 30 days.

Step 1 of 60 of 15 answered

Inventory

01Is the scope of systems and applications to monitor defined?

AbsentNo defined practice or no available evidence to verify it within the chosen scope.PartialA practice exists, but coverage, application or traceability is incomplete.OperationalThe practice is applied within the chosen scope, with an owner and verifiable evidence.

02Are the products, versions and components needed for monitoring identified?

AbsentNo defined practice or no available evidence to verify it within the chosen scope.PartialA practice exists, but coverage, application or traceability is incomplete.OperationalThe practice is applied within the chosen scope, with an owner and verifiable evidence.

03Does each monitored asset have an identified owner?

AbsentNo defined practice or no available evidence to verify it within the chosen scope.PartialA practice exists, but coverage, application or traceability is incomplete.OperationalThe practice is applied within the chosen scope, with an owner and verifiable evidence.

Resources to organise vulnerability management.

Articles to support your decisions.

Vulnerability management from a leadership perspective.

Three starting points for your process.

Prioritising vulnerabilities: start with your context

A useful SBOM starts with a clear scope

Plan for end of support before it becomes urgent

How well do you track vulnerabilities and end of support?

Need ongoing support?

Resources to organise vulnerability management.

Articles to support your decisions.

Vulnerability management from a leadership perspective.

Three starting points for your process.

Prioritising vulnerabilities: start with your context

A useful SBOM starts with a clear scope

Plan for end of support before it becomes urgent

How well do you track vulnerabilities and end of support?

Need ongoing support?

Resources to organise vulnerability management.

Articles to support your decisions.

Vulnerability management from a leadership perspective.

Three starting points for your process.

Practical guides

Prioritising vulnerabilities: start with your context

A useful SBOM starts with a clear scope

Plan for end of support before it becomes urgent

How well do you track vulnerabilities and end of support?

Need ongoing support?

Resources to organise vulnerability management.

Articles to support your decisions.

Vulnerability management from a leadership perspective.

Three starting points for your process.

Practical guides

Prioritising vulnerabilities: start with your context

A useful SBOM starts with a clear scope

Plan for end of support before it becomes urgent

How well do you track vulnerabilities and end of support?

Need ongoing support?