Running vulnerability management at Cascade Health Network as a remediation funnel lying on its side: 40,000 raw findings from 4,200 assets enter on the left and pass through discover, scan, enrich, prioritize, assign, remediate, verify and report, with leaks where risk escapes — unscanned assets, a CVSS-only queue and closed tickets that are not fixed — until proven fixes come out on the right. One OS patch clears 9,000 findings at once. Below, two CVSS 9.8 findings are ranked by exploitability, the one on the KEV list with EPSS 0.94 first, and a re-scan of 40 closed findings shows 9 still present and reopened; a 30-day report shows 34% risk reduced, a KEV fix time of 3.1 days, SLA adherence of 88% for criticals and 79% for highs, and 96% scan coverage with 412 assets still uncovered.

CY-MID-003Mid Level · Vulnerability Management

Vulnerability Management Operations — The Remediation Funnel

A hands-on mid-level course that runs vulnerability management as a flow: thousands of raw findings in, a proven-fixed few out. Work the remediation funnel — Discover, Scan, Enrich, Prioritize, Assign, Remediate, Verify, Report — prioritizing by real risk (KEV, EPSS, exposure, criticality) over raw CVSS, with real analyst commands across authenticated scanners, container and cloud scanning, patch tooling, and re-scan verification. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Run the whole remediation funnel from discovery to verified, reported closure.
Measure scan coverage against a real inventory and scan deeply and safely across hosts, containers, and cloud.
Prioritize by real risk — KEV, EPSS, exposure, and asset criticality — instead of raw CVSS.
Assign to accountable owners with risk-based SLAs, remediate or mitigate hard cases, and prove closure by re-scan.

Price:৳8,000