Cybersecurity · Advanced level

Advanced level · Module 2 of 6 · 22 guided hours

Vulnerability Management and Authorised Testing

Find and fix weaknesses systematically, and understand the legal and ethical rules for security testing.

Learning objectives

  • Run a vulnerability management cycle
  • Use a vulnerability scanner in an isolated lab
  • Prioritise remediation by risk
  • Apply the law, ethics and rules of engagement for testing

Topics

  • vulnerability lifecycle
  • CVEs and severity
  • lab scanning
  • prioritisation
  • remediation tracking
  • legal and ethical testing

Lessons

  1. Lesson 1 Law, Ethics and Rules of Engagement

    Know when security testing is legal and ethical — and when it is not.

    authorisationcomputer misuse lawsrules of engagementresponsible disclosure

  2. Lesson 2 The Vulnerability Management Cycle

    Find, prioritise, fix and verify weaknesses continuously.

    CVECVSS severityknown exploited vulnerabilitiescycle

  3. Lesson 3 Authorised Scanning in the Lab

    Use a vulnerability scanner safely on lab systems.

    network discoveryauthenticated scansfalse positivesscan reports

  4. Lesson 4 Prioritising and Tracking Remediation

    Fix the most dangerous weaknesses first and prove they are fixed.

    risk-based prioritisationexposureremediation SLAsverification

Practical activity

In an isolated lab of intentionally vulnerable virtual machines, run authorised scans, prioritise findings and track remediation to closure.

Expected outcomes

  • A working vulnerability management process
  • Clear understanding of authorised testing

Assessment

Lab scan report, prioritisation and remediation tracker reviewed; ethics quiz.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.