A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities
Date: 2025-01-29 13:00
Source: UK National Cyber Security Centre
Summary:
The UK National Cyber Security Centre (NCSC) has published a new article that introduces a method for assessing whether a vulnerability is “forgivable” or “unforgivable.” This method is designed to help organizations prioritize their vulnerability management efforts and focus on the most critical vulnerabilities.
Key Points:
- Forgivable vulnerabilities are those that can be easily exploited by an attacker, but can also be easily mitigated. For example, a vulnerability that requires an attacker to have physical access to a device may be considered forgivable.
- Unforgivable vulnerabilities are those that can be easily exploited by an attacker and are difficult or impossible to mitigate. For example, a vulnerability that allows an attacker to remotely execute code on a device may be considered unforgivable.
- The NCSC’s method for assessing vulnerabilities takes into account a number of factors, including:
- The likelihood of the vulnerability being exploited
- The impact of the vulnerability if it is exploited
- The ease of mitigating the vulnerability
- The NCSC recommends that organizations use this method to prioritize their vulnerability management efforts and focus on the most critical vulnerabilities.
Implications:
This new method from the NCSC provides organizations with a valuable tool for prioritizing their vulnerability management efforts. By focusing on the most critical vulnerabilities, organizations can reduce the risk of a successful cyberattack.
Additional Information:
The NCSC’s article on “forgivable” and “unforgivable” vulnerabilities is available at the following link:
www.ncsc.gov.uk/guidance/a-method-to-assess-forgivable-vs-unforgivable-vulnerabilities
Contact Information:
For more information, please contact the NCSC at:
- Email: info@ncsc.gov.uk
- Phone: +44 (0)300 123 2000
A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities
The AI has provided us with the news.
I’ve asked Google Gemini the following question, and here’s its response.
UK National Cyber Security Centre a new article on 2025-01-29 13:00 titled “A method to assess ‘forgivable’ vs ‘unforgivable’ vulnerabilities”. Please write a detailed article on this news item, including any relevant information. Answers should be in English.
111