Covers the vulnerability management lifecycle from asset discovery and scanning to prioritisation, remediation, verification and reporting. Explains CVE, CWE, CPE and CVSS, risk-based prioritisation with EPSS and CISA KEV, remediation SLAs, exceptions and compensating controls, and scanners such as Nessus, Qualys and Trivy.