Your connected products and vulnerability management: where do you stand?

Score

A clearly identified role, with a mandate and resources

It's spread across the team, with no clearly designated owner

No one in particular / handled case by case

A defined process, deadlines met, patches tested

We fix it, but without systematic deadlines or testing

Yes: the channel and templates exist and have been tested

In theory, but nothing is ready or proven

Published, with tracking of reports and metrics

A page exists, but with no real follow-up

Yes (security.txt / dedicated contact / prompt reply)

Only with difficulty (generic form, reply not guaranteed)

I agree to be contacted by RS Strategy regarding my positioning.