Out of the plethora of vulnerabilities that exist, just a few are responsible for most Internet breaches. Vulnerability volume, density, or a score assigned last year is not nearly as important as the actual, real-time risk that a given vulnerability poses. This paper examines how to utilize data to make intelligent decisions that minimize risk to applications and infrastructure.
Risk I/O Research Paper – Adopting a Real-Time, Data-Driven Security Practice
risk.io