QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Replacing a CVSS-sorted queue at Ashcombe Mutual Insurance with risk-based prioritisation: before, an exploited medium on the gw-edge-02 gateway sat at position 11,400 of 60,214 findings while 3,960 criticals were closed on internal hosts; the priority funnel narrows every finding through asset context, likely exploitation, tiers, grouping by fix, ownership and measurement, from 60,214 findings to 441, to 214 in Tier 1, to 38 fixes and finally 24 open fixes; and after, the model places 21 of 23 past incidents in the top tiers against 6 under CVSS, Tier-1 fixes close within 7 days at p90, and the register is signed for the risk committee.
CY-EXPERT-066Expert Level · Vulnerability Management

Vulnerability Prioritisation Programme Optimisation

An expert-level course on replacing 'fix all criticals in 30 days' with risk-based prioritisation an organisation can defend. Work down the priority funnel - eight bands from every scanner finding across the estate, through asset context, exploitation likelihood, a calibrated tier model, grouping by fix, ownership and routing, and outcome measurement, to the ranked, owned list that is fixed first - and assemble a model and register that engineering teams trust, a risk committee can act on and an auditor can re-perform.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Reconstruct a prioritisation failure from queue history, explain the limits of a CVSS base score, profile an open queue and set testable objectives.
  • Attach asset context - inventory match, evidence-based exposure, criticality, data class and verified compensating controls - to every finding.
  • Use known-exploited catalogues, EPSS and sector intelligence as dated inputs, and record the model's blind spots.
  • Write an explainable tier model, size SLAs to change capacity, calibrate it against the organisation's own incidents and justify its thresholds.

Price:৳12,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.