Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix

Sooner or later a client says no. The finance system only runs on an old version of Windows. The vendor won't support the patch. The fix means a weekend of downtime they can't afford this quarter. That is a legitimate business decision. The problem is what happens next: the finding stays on every report, someone marks it "ignore" in the scanner,... Weiterlesen: Risk Acceptance: How to Document a Vulnerability Your Client Won't Fix