Name of the measure

Threat and vulnerability management

Related attribute

Proactive threat and vulnerability management

Context

The level of vulnerability of shared resources has an impact on the security of the infrastructure. To protect against threats and attacks, it is important to reduce the level of vulnerability of shared resources

Measure audience

Organizations (supplier and applicant)

objective

The goal is to ensure that shared resources meet the vulnerability levels of the CVSS [9] .

Definition of the measure

Assign sensitivity levels to each shared resource. These levels are defined according to the CVSS v2.0 vulnerability level standard

Data collection

The level of sensitivity is defined by each supplier of resources and validated by the applicant.