Vulnerability Management
A Practitioner’s Field Guide: the complete three-volume set
Each volume stands alone, with its own index. Read in order — Learn, Run, Operate — or take the one you need.
Vulnerability management that ranks by real risk, not raw counts. The three volumes go from finding and ranking what matters, to running the programme, to the templates that keep fixes on time.
Companion to the Vulnerability Management toolkit — the assessment and ready-to-use templates that put this book to work.
From the blog: Your first scan just found 4,000 findings — an essay-length preview of the same ground this set covers, free.
Understanding and Prioritising
Volume 1 of the three-volume Vulnerability Management set: understanding and prioritising, covering what VM actually is, asset inventory, the vulnerability lifecycle, the maturity spectrum, the VM-PSIRT relationship, CVE and CVSS without the folklore, KEV and EPSS, business context, severity versus risk, and the patching ladder. Volume 2 runs the programme; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.
Running the Programme
Volume 2 of the three-volume Vulnerability Management set: running the programme, covering scanner programme design, patch management mechanics, SLA design and enforcement, exception management, metrics and board reporting, VM for cloud and SaaS, VM for OT and ICS, third-party VM with vendor advisories and SBOMs, regulatory drivers, and annual cadence. Volume 1 covers understanding and prioritising; Volume 3 is the Operator's Workbook. Each volume stands alone. Each is modestly priced in ebook.
The Operator's Workbook
Volume 3 of the three-volume Vulnerability Management set: the Operator's Workbook, with asset inventory templates, triage decision trees and scoring matrices, patch and remediation workflow templates, exception management, vendor advisory consumption, metrics and board reporting, and the specialised-context runbooks, plus the template finder, the VM Glossary, and the Maturity Rubric. Each volume stands alone. Each is modestly priced in ebook.
The set at a glance
Swipe sideways to see the full table →
| Volume | Pages | Depth | ISBN | Price |
|---|---|---|---|---|
| Volume 1 | 328 | 16 chapters | TBD | TBD |
| Volume 2 | 328 | 18 chapters | TBD | TBD |
| Volume 3 (Workbook) | 358 | 9 chapters | TBD | TBD |
Where to buy
Vulnerability Management will be available in paperback, hardcover, and ebook through print-on-demand retailers, each volume sold separately. The links activate the moment the titles list; until then, email us and we’ll tell you at launch.
Cover art, pricing, and availability are not yet final and will be updated when these titles are listed for sale. Books are sold through print-on-demand retailers (KDP, IngramSpark, Amazon, and independent bookstores) — not through the Sylvan Assurance toolkit store.