NIST CSF Sub-Category ID.RA-01
Managing vulnerabilities is essential to prevent exploitation and protect critical systems, and normative documents provide the standards and legal frameworks to guide this process. Standards like ISO/IEC 27001 and ISO/IEC 27002 define requirements for vulnerability management, while NIST SP 800-40 specifically provides guidance on patch and vulnerability management for information systems. Agencies such as CISA in the U.S. and ENISA in the EU regularly issue vulnerability alerts and best practices, helping organizations prioritize fixes and mitigations. Compliance with these standards and regulations ensures that vulnerabilities are systematically identified, assessed, and remediated, reducing risk exposure and supporting legal and contractual obligations.
The First EPSS Calculator is an open-source tool designed to fetch and display the Exploit Prediction Scoring System (EPSS) score for one or multiple CVEs (Common Vulnerabilities and Exposures). The calculator… Read More »FIRST Exploit Prediction Scoring System (EPSS) Calculator
The FIRST CVSS Calculator is an interactive tool provided by the Forum of Incident Response and Security Teams (FIRST) that enables users to assess the severity of software vulnerabilities using… Read More »FIRST Common Vulnerability Scoring System (CVSS) Calculator Version 4.0
MITRE’s Common Weakness Enumeration (CWE) is a community-developed, comprehensive list and classification taxonomy of common software and hardware weaknesses that can lead to security vulnerabilities. It identifies and describes these… Read More »MITRE CVE (Common Vulnerabilities and Exposures)