Glossary: Threats, Threat Actors and Motivations

prioritization

Putting vulnerabilities in fix order by weighing severity (CVSS), real exploitation (KEV), predicted exploitation (EPSS), asset value, and exposure and controls. Exploited and exposed beats a slightly higher score.