Vulnerability Management Program

A vulnerability is any weakness in a system or process that leaves information security exposed to a threat.   DotCIO's vulnerability management program strives to protect Rensselaer's IT resources and reduce risk to the institute by identifying vulnerabilities and ensuring remediation.  This program aims to reduce the potential for negative impact on the availability, integrity, and confidentiality of Rensselaer data and IT infrastructure.

DotCIO will routinely scan devices connected to the campus network for vulnerabilities. Vulnerabilities will be verified and prioritized; system owners and administrators will be notified and are expected to resolve the risks and remove potential threats as outlined in the vulnerability management policy.

A majority of vulnerabilities can be addressed by applying the latest relevant patches or updates.