Security Weekly - A CRA Resource: Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228

Vulnerability management isn’t just about finding more vulnerabilities—it’s about knowing what matters and having the resources to act. Chuck Loring of the Lee County Clerk of Circuit Court & Comptroller joins CISO Stories to explore how budgets, staffing, legacy technology, and mission priorities shape vulnerability management across the public and private sectors. We challenge the idea that AI alone will solve the problem and discuss where it can actually make a difference. Chuck shares his perspective on risk-based prioritization as vulnerability volumes continue to surge. The conversation also examines what public and private organizations can learn from each other. Ultimately, effective vulnerability management isn’t about patching everything—it’s about identifying and addressing what poses the greatest risk.

Segment Resources:
-https://cybersecconsultingleaders.com/blog

Show Notes: https://cisostoriespodcast.com/csp-228