Packs
1 packResults for “vendor-risk-management”
21 skillsMore results
trailofbits supply-chain-risk-auditor
Audits project dependencies for supply chain risks including single maintainers, unmaintained packages, low popularity, high-risk features, past CVEs, and missing security contacts.
6k · bundle
nvidia vss-manage-alerts
Operate the VSS alert pipeline for real-time monitoring, Alert-Bridge subscriptions, Slack notifications, incident queries, and camera onboarding.
2.2k · bundle
mukul975 assessing-vector-and-embedding-weaknesses
Test vector stores for embedding inversion, cross-tenant leakage, and poisoning.
24.6k · bundle
alirezarezvani secrets-vault-manager
Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.
20.4k · bundle
alirezarezvani env-secrets-manager
Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.
20.4k · bundle
mukul975 triaging-vulnerabilities-with-ssvc-framework
Triage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.
24.6k · bundle
mukul975 performing-asset-criticality-scoring-for-vulns
Build a multi-factor asset criticality scoring model to weight vulnerability prioritization based on business impact, data sensitivity, and operational importance.
24.6k · bundle
mukul975 prioritizing-vulnerabilities-with-cvss-scoring
Calculate CVSS scores, interpret vector strings, and prioritize vulnerabilities using CVSS alongside EPSS and CISA KEV for effective risk-based remediation.
24.6k · bundle
mukul975 building-vulnerability-scanning-workflow
Establishes recurring vulnerability scanning workflows using Nessus, Qualys, or OpenVAS, prioritizes findings with risk scoring and CISA KEV data, integrates with SIEM for exploitation detection, and tracks remediation via SLA-based dashboards and automated ticketing.
24.6k · bundle
mukul975 implementing-vulnerability-management-with-greenbone
Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.
24.6k · bundle
mukul975 implementing-cloud-vulnerability-posture-management
Continuously monitor cloud infrastructure for misconfigurations, compliance violations, and security risks using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite.
24.6k · bundle
mukul975 implementing-secrets-management-with-vault
Centralize secrets management with HashiCorp Vault, including dynamic secret generation, transit encryption, PKI certificate management, and Kubernetes integration.
24.6k · bundle
mukul975 analyzing-sbom-for-supply-chain-vulnerabilities
Parses Software Bill of Materials (SBOM) in CycloneDX and SPDX JSON formats to identify supply chain vulnerabilities by correlating components against the NVD CVE database via the NVD 2.0 API, building dependency graphs, calculating risk scores, and generating compliance reports.
24.6k · bundle
intense-visions security-craft
Security Craft
18 · bundle
mukul975 building-vulnerability-exception-tracking-system
Build a vulnerability exception and risk acceptance tracking system with approval workflows, compensating controls documentation, and expiration management.
24.6k · bundle
mukul975 conducting-memory-forensics-with-volatility
Analyze RAM dumps with Volatility 3 to detect malware, process injection, network connections, and credential theft during incident response.
24.6k · bundle
drnabeelkhan fedramp
Applies the FedRAMP framework to identify, assess, and mitigate security risks in systems, processes, and data handling.
2
mukul975 implementing-privileged-access-management-with-cyberark
Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure, covering vault architecture, session isolation, credential rotation policies, and NIST 800-53 integration.
24.6k · bundle
rulebase-co cx-third-party-risk
Use to review how an outsourcer, BPO or vendor handles your customer data and meets your conduct obligations, using evidence from the work rather than from their questionnaire answers. Trigger for "review our BPO's data handling", "vendor risk assessment for our outsourcer", "are our partners compliant", third-party oversight, outsourcing due diligence, or a supplier audit of a support vendor.
1
mukul975 implementing-patch-management-for-ot-systems
Establish a structured patch management program for OT/ICS environments, covering vendor compatibility testing, risk-based prioritization, staged deployment, rollback procedures, and compensating controls for unpatchable systems.
24.6k · bundle