I
Vulnerability management includes tracking vulnerabilities and the remediation efforts to mitigate them. This provides a clear opportunity to provide good qualitative metrics to the organization’s management on the numbers and types of vulnerabilities, the potential impacts and the effort needed to mitigate them.