Unsupervised Learning

Scott Kuffer of Nucleus Security | SPONSORED INTERVIEW SERIES

Nov 28, 2022

47:31

Creator website

Highlights

AI Chapters

Episode notes

The First Step to Doing Vulnerability Management Correctly

02:43

What Are You Not Addressing in the VM Space?

03:52

Scrum Teams Aren't Doing a Good Job.

02:21

Introduction

2min

Do You Have a Risk-Based VM Process?

3min

The First Step to Doing Vulnerability Management Correctly

3min

Is It a Crown Jewel?

2min

Is There Multiple Layers of Ownership Inside of Nucleus?

2min

Is Nucleus a Ticketing System?

2min

The Problem Isn't a Technical Problem, but a Process Problem

4min

Is There a Rechecking Story?

2min

How Do You Automate Ticket Issues?

2min

10.

Why People Don't Want to Do Vulnerability Management?

3min

11.

Can Custom Findings Be Used for Custom Vulnerabilities?

2min

12.

What Are You Not Addressing in the VM Space?

4min

13.

Do You Encourage Name and Shame?

2min

14.

Scrum Teams Aren't Doing a Good Job.

2min

15.

What Do You Think We're Doing Really Well?

3min

16.

Is That a Threat Intelligence Feed?

2min

17.

Is There a Risk in a Vulnerability?

4min

18.

Can I Change the Component on the on the Score? Yes, Absolutely.

4min

In this standalone episode we’re doing a sponsored interview with Scott Kuffer, co-founder and COO of Nucleus Security.

I was already excited by this vendor just based on the research I did to allow them to be a sponsor, but the conversation with them really made me think they’re approaching the vulnerability management problem the right way. Namely, by tackling a lot of the non-technical problems using technical solutions rather than obsessing over vuln prioritization.

If you are in the VM space or are about to be in it, you will love this conversation.

And with that, here’s Scott Kuffer with Nucleus Security.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.