Enriching Risk Assessment through Vulnerability Prioritization

No ratings

Presented at BlackHat Asia 2020 by

Christopher Strand

Threat Intelligence is normally used to enrich the process of threat assessment, providing proof on the enforcement of security controls required to be secure and compliant. As threat intelligence technologies evolve, they have become more instrumental to security audit, providing valuable context and enhanced prioritization to the process. During this session we will explore examples where contextual threat intelligence can be applied directly to cyber-regulatory requirements to prioritize security control assessment process, gap analysis, and threat protection.