Vulnerability management can sometimes seem like a problem without a solution. While there is no easy solution to vulnerability management and our work will never be finished, solutions do exist and we can successfully reduce the vulnerabilities in our environment to a much more manageable level. New vulnerabilities will emerge every week, but with the right processes and procedures in place, our technology and development organizations will know how to respond. The greatest secret of vulnerability management is realizing that vulnerability management is not the problem. Join us as we discover the secret of vulnerability management.

About the speaker
David Hazar is a security consultant based in Salt Lake City, Utah, whose focus is vulnerability management, application security, cloud security, and DevOps. David has 20 years of extensive, deep technical experience gained in a variety of IT roles throughout his career, including: developer, server administrator, network administrator, domain administrator, telephony administrator, database administrator/developer, security engineer, risk manager, and AppSec engineer. David is a co-author and instructor for MGT516: Managing Security Vulnerabilities: Enterprise and Cloud, instructor and contributor for SEC540: Cloud Security and DevOps Automation, and has also developed and led technical security training initiatives at many of the companies he has worked for. Read more about David at https://www.sans.org/profiles/david-hazar/

MGT516: Creating and Managing Vulnerability Management Programs
https://www.sans.org/cyber-security-courses/building-leading-vulnerability-management-programs/?mscinstructor-david-hazar

Learn more about the SANS Cybersecurity Leadership Curriculum at www.sans.org/cybersercurity-leadership.

Connect with us on social networks:
LinkedIn – SANS Security Leadership
Twitter – @secleadership
YouTube – SANS Institute – Playlist for Cybersecurity Leaders
Discord – www.sansurl.com/leadership-discord

SANS is the most trusted and by far the largest source of information security training and security certifications in the world. In addition, the company develops, maintains and makes available free of charge the largest collection of research documents on various aspects of information security and operates the Internet's early warning system – the Internet Storm Center.

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.