VA solutions have evolved so that specialized security skills are no longer required to install or operate. There are still false positives, and scans still have an impact on target hosts. In addition, VA products are only now fully utilizing the data stored within the scans themselves to do risk management and threat assessment.
Installing and deploying a VA solution is the easy part. Doing something with the data is the difficult part. Lots of work is involved with VA program management. There can be a lot of internal resistance to scans.
A well deployed and used VA solution can be extremely helpful in securing the network and validating that other security measures, such as endpoint security and patch deployment, are working.
VA solutions can be a critical part of the security infrastructure, but there are plenty of obstacles that must be overcome.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
