CTEM: Prioritization

What is the CTEM Prioritization phase?

Prioritization is Phase 3 of Continuous Threat Exposure Management and is designed to rank your vulnerabilities based on impact to your business.

Version Number: v1.0.1

Published Date: 16 May 2024

____________________________________________________________________________

During this stage, the identified vulnerabilities are ranked based on the threat that they pose to the business. Often, this is based on potential exploitability, chance of breach and criticality of the asset hosting the vulnerabilities. Metadata such as EPSS and CISA KEV coupled with more traditional CVSS and OWASP severity rating methodologies can be used to achieve this.