Vulnerability Groups – January 31, 2024

Vulnerability groups are now available for the following workflows:

• Vulnerability Detection – Conduct research on how these groups are affecting your portfolio. See which vulnerabilities are part of the vulnerability group and how they affect your portfolio through the following applications:
  • Continuous Monitoring
  • Cyber Insurance
  • Security Performance Management
• Questionnaires [ Client Engagement ➔ Questionnaires]
• Vendor – Completing questionnaires on the vendor side.

Vulnerability groups classifies vulnerabilities in Vulnerability Detection based on common frameworks and events, to make zeroing in on the correct exposures easier and provides a more acute way of prioritizing which vulnerabilities to prioritize remediation or outreach on.

With vulnerability groups, you can:

• Send vulnerability response questionnaires based on groups in addition to individual vulnerabilities.
• Request additional Group classification requests how regular feature requests are made today.

The common frameworks include CISA’s Known Exploited Vulnerabilities list and zero-day events containing multiple vulnerabilities.