The first stage of the management process requires identifying which vulnerabilities might affect your systems. Once you know what vulnerabilities or types of vulnerabilities you are looking for, you can begin identifying which are present. Compile all of the assets you need to test, determine their importance and who can access them (whether just administrators or your whole team). Work to maintain a continuously updated inventory so you can provide a map of the vulnerabilities throughout your network.

In the stage of remediation, the goal is to monitor vulnerabilities, assign tickets, and manage exceptions.As vulnerabilities are detected and reported, the next step in the vulnerability management process is to correct, monitor, or remove those vulnerabilities. This can be skilful through the necessary updates and patches to avoid the threat.

After vulnerabilities are addressed, make sure that you verify successful remediation. Penetration testing is useful for this as it can help you gauge the effectiveness of your fix. It can also help you ensure that new vulnerabilities were not created during your efforts.