Files
tsysstaticsites/data/content/plan.knownelement.com/Processes/VulnerabilityManagmentNotes.md
Charles N Wyble bbabf7e88c refactor: move content under data/ for Git Sync compatibility
Git Sync expects folders: pages/themes/plugins/config/data
Content now at data/content/{fqdn}/pages/

Assisted-by: GLM-5 via Crush <crush@charm.land>
2026-03-02 17:02:45 -05:00

635 B

Vulnerability management

  • identify total asset base (use nmap and see if it matches librenms and resolve any discrepancies)
  • perform scans of total asset base (using openvas/lynis/ossim)
  • manage vulnerability ratings/scope
  • notify/escalate to appropriate contacts
  • address the vulns
  • report metrics (i think the apps provide built in dashboards, may need some light modification)

i think ossim can do all the above ,also lynis/openvas (the three combined should provide complete coverage) (network scan/agent based combination)

librenms is our CMDB currently (for identifying assets/contacts). phpipam is our inventory.