Measuring Risk with One Yardstick: Lessons Learned on the Road to RBVM

How should we measure risk? Zebra Technologies has more than a dozen cybersecurity tools, thirty-five teams, and hundreds of people worldwide managing vulnerabilities. They wanted to measure with one yardstick; use a single, risk-based solution that could be customized to meet business criteria.
Scott Kuffer, COO of Nucleus Security, and Dr. Jasyn Voshell, Director of Products and Solutions Security at Zebra Technologies, shared Zebra Technologies' road to Risk-Based Vulnerability Management using Nucleus Security at Black Hat USA 2024. Hear how Zebra used risk scoring to engage key stakeholders comparing team, product, and solution scores to companywide thresholds. Currently at 95% consolidation, Jasyn outlines key lessons in enterprise-scale RBVM roll-out, including how to build on success and why you should identify teams' appetite for disruption.
Nucleus Security: nucleussec.com/
Zebra Technologies: www.zebra.com/