Vulnerability Monitoring

Definition

Vulnerability Monitoring: Continual ingestion of public and private vulnerability information against an organisation's asset inventory. Vulnerability monitoring (ISO/SAE 21434 Clause 8) ingests CVE feeds, vendor advisories, EPSS scores, CISA KEV, and ISAC/ASRG intelligence; correlates them against deployed components (often via SBOMs); and feeds confirmed exposures back into TARA updates and incident response.