Vulnerability Program: Work Queue or Landfill?
New code turns into tech debt the moment it’s committed. If you don’t fix known issues - security or otherwise - on the way in, they usually don’t get fixed.
See Also: The State of Vulnerability Management
The ecosystem makes it worse. New architectures and design patterns are developed, frequently making your shiny new code an antique. Cloud vendors create innovations that alter the definition and scope of an application. Open-source libraries are updated and released constantly, sometimes with additional functionality, sometimes with security fixes and sometimes with malicious code.
Let’s face it. Software ages like milk, not wine. Are you keeping up or falling behind? Do you spend more time deploying fixes or dealing with exceptions to policy? It’s time for a change. Here's what you will learn:
- What the vulnerability landscape looks like currently;
- The factors from both security and development that are contributing to the problem;
- Steps to take to get better.
