The CVSS score – more accurately, the CVSS base score – is a useful tool to compare vulnerabilities in the abstract. But it was not designed to evaluate risk or be the end of the conversation on vulnerability prioritization. And yet, that is often how CVSS is utilized.
Paul McKay, principal analyst at Forrester Research, will talk about his own research on security rating platforms: where he sees the most potential, and what could still use some development before prime time.
Laura Koetzle, vice president and group research director at Forrester Research, took time out during the RSA Conference to speak to Security Weekly's Matt Alderman about applying the lessons of 2020 and recognizing changes to security management.
In addition to plugging recent efforts by the administration, Neuberger used her talk at the RSA Conference to call upon industry for support: "Continued partnership with you, the private sector is critical to achieving objectives."
Jinan Budge, principal analyst of security & risk at Forrester, spoke to Security Weekly's Matt Alderman the week of the RSA Conference about how to look at culture in the company, focus "people vision," and acquire tools to encourage a team environment.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.