Vulnerability Assessment

The vulnerability assessment learning path guides you through a holistic security assessment approach, where you will develop a well-structured framework for analyzing the security of a system. You will acquire the skills to perform custom vulnerability assessment for any computer system, application or network infrastructure.

Get started

7 courses // 32 videos // 7 hours of training

Free training week — 1,400+ on-demand courses and hands-on labs

Start Learning

Learn to assess vulnerabilities

What is the difference between doing a vulnerability assessment for a fitness tracker and an internet-connected pacemaker? Quite significant! Simple scanning may be sufficient in some cases, but others require a deeper look. In this path, you’ll learn a variety of ways to discover vulnerabilities, classify and prioritize vulnerabilities based on real-world criticality measures, define the actual risk of the vulnerabilities, create and execute an actionable remediation plan, and document and maintain a vulnerability assessment. Finally, you’ll learn some key security controls that don’t targeting specific vulnerabilities, but enhance the overall security of your system.

Learning path components

Vulnerability Assessment Skill Assessment

See how your vulnerability assessment skills stack up against other professionals in your field.

Number of questions: 20

Vulnerability Assessment Project

Test your vulnerability assessment skills as your progress through seven challenges leveraging free-to-use security tools and services. First you'll set up your environment using JDK 11, Maven 3.6.3 and Git. Then you'll use SNYK, static application security testing with Coverity Scan and a risk assessment template to discover, identify and rate the CWEs and CVEs. Finally, you'll find the most appropriate fixes for the two vulnerabilities with the highest risk.

Number of questions: 7

Vulnerability Management in a Nutshell

This course covers the basics of vulnerability assessment, including definitions, scope, policy and process.

4 videos
30 minutes of training

Vulnerability Discovery

This course guides you through five different type of security tools for discovering vulnerabilities in various environments.

5 videos
108 minutes of training

Vulnerability Classification

This course covers three main topics: false positives, standardized vulnerabilities, and weakness classification systems and threat-based vulnerability/weakness classification.

3 videos
39 minutes of training

Prioritization and Risk Assessment

This course covers how to classify and prioritize vulnerabilities based on real-world criticality measures and how to define the true risk of the vulnerabilities for a specific environment.

5 videos
71 minutes of training

Vulnerability Assessment Documentation and Maintenance

This course covers how to create comprehensive, clear and easy-to-understand vulnerability assessment documentation, and how to go about keeping the vulnerability findings and scoring current.

3 videos
43 minutes of training

Remediation and Mitigation

In this course, we will cover a wide range of topics about the vulnerability remediation and mitigation process, including the most common remediations and mitigations and strategies for deployment of security measures.

5 videos
56 minutes of training

Key Security Controls

This course covers the top most effective security controls to reduce the overall risk of systems and networks. Recommendation of such controls is a perfect add-on for any vulnerability assessment.

7 videos
80 minutes of training

What you’ll learn.

Variety of ways to discover vulnerabilities
How to classify and prioritize vulnerabilities based on real-world criticality measures
How to look at the bigger picture and define the actual risk of the vulnerabilities for your specific environment
How to create and execute an actionable remediation plan
How to document and maintain a vulnerability assessment

Who is this for?

Security architects
Security engineers
Security consultants
Risk and hazard managers
Anyone who wants to learn about assessing security risk

Meet the author

Mitko Katsev

Mitko Katsev has nine years of education in system programming and computer engineering, and over eight years work experience in software development and security. He started his career as a software engineer before transitioning into information security and application security. He currently works at his own security consultancy company, ArmadilCo.

He’s completed various InfoSec/AppSec training and certifications, including SANS Defensible Security Architecture and Engineering (SEC530), SANS Defending Advanced Adversaries - Purple Team Tactics (SEC599), multiple Microsoft security development lifecycle (SDL) trainings and more.

Learn More

You're in good company

Infosec Skills is a very good place for building technical acumen and engineering development knowledge. It enables us to provide training to the entire team on relevant topics.

Comcast Business

Romy Ricafort, West Division Senior Director of Sales Engineering

Comparing Infosec to other vendors is like comparing apples to oranges. My instructor was hands-down the best I've had.

FireEye, Inc.

James Coyle , Senior U.S. Public Sector Channel Sales Engineer

I knew Infosec could tell me what to expect on the exam and what topics to focus on most.

Tennenbaum Capital Partners

Julian Tang, Chief Information Officer

See More Case Studies

Plans & pricing

Infosec Skills Personal

$599 / year

Buy Now 7-Day Free Trial

190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
100s of hands-on labs in cloud-hosted cyber ranges
Custom certification practice exams (e.g., CISSP, Security+)
Skill assessments
Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting Free Team Trial

Team administration and reporting
Dedicated client success manager
Single sign-on (SSO)

Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
Integrations via API

Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
190+ role-guided learning paths and assessments (e.g., Incident Response)
100s of hands-on labs in cloud-hosted cyber ranges
Create and assign custom learning paths
Custom certification practice exams (e.g., CISSP, CISA)
Optional upgrade: Guarantee team certification with live boot camps