A missing patch isn't necessarily a vulnerability. A vulnerability isn't necessarily a missing patch.
I thought this was basic knowledge, but I am finding myself having to argue this point. Am I off base?
#infosec #vulnerabilitymanagement
@Xavier ahh. Auditors?
@falken Worse, other security executives.
