olemus
protsess süsteemi või IT nõrkuste ärakasutuse ennetavaks vältimiseks või nõrgendamiseks; sooritatakse koos riskihaldusega ning hõlmab nõrkuste tuvastamst, liigitamist, hindamist, kõrvaldamist ja leevendamist
= the process of identifying, evaluating, treating, and reporting on security vulnerabilities

ülevaateid
https://www.techopedia.com/definition/16172/vulnerability-management
https://en.wikipedia.org/wiki/Vulnerability_management
https://www.balbix.com/insights/what-is-risk-based-vulnerability-management/
http://docs.media.bitpipe.com/io_12x/io_124954/item_1190887/best-practices-for-threat-and-vulnerability-management.pdf
https://www.cisecurity.org/wp-content/uploads/2018/07/Cybersecurity-Tech-Basics-Vulnerability-Management-Overview.pdf
https://us-cert.cisa.gov/sites/default/files/c3vp/crr_resources_guides/CRR_Resource_Guide-VM.pdf
https://owasp.org/www-project-vulnerability-management-guide/OWASP-Vuln-Mgm-Guide-Jun05-2020.pdf
https://www.cisa.gov/sites/default/files/publications/CRR_Resource_Guide-VM_0.pdf