QuestionQ158

Risk Response and Reporting

The BEST key performance indicator (KPI) for measuring the effectiveness of a vulnerability-remediation program is the number of:

  • A new vulnerabilities identified.
  • B recurring vulnerabilities.
  • C vulnerabilities remediated.
  • D vulnerability scans.
Explanation

Recurring vulnerabilities directly measure whether remediation resolves vulnerabilities durably. Repeated occurrences indicate that prior remediation was ineffective, incomplete, or failed to address the root cause.

Community Discussion

No comments yet. Be the first to start the discussion!