ADIR Andersen on Modernizing Vulnerability Management Under BOD 26‑04
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Hear from Andersen, CISA’s Associate Director for Incident Response, as they discuss how BOD 26‑04 helps agencies stay ahead of modern cyber threats by shifting to a risk‑based, intelligence‑driven vulnerability management model. In this video, Andersen explains how prioritizing vulnerabilities based on exposure, Known Exploited Vulnerabilities (KEV) status, exploit automation, and technical impact allows defenders to respond at machine speed — matching adversaries’ rapidly accelerating operations.
Description from CISA.
