Patch Priority Board: CVSS, KEV, SLAs and ATT&CK in Excel

<p>Every month the vulnerability-management tool exports hundreds of findings, and every month the same question comes back: what do we fix first? Sorting by CVSS base score alone sends teams after the wrong things.</p><p>In three lessons you learn what a CVSS base score does and does not tell you, why CISA's Known Exploited Vulnerabilities (KEV) catalogue changes priorities, how environmental context (asset criticality, internet exposure) adjusts a score, how to set remediation SLAs and track days left, and how mapping findings to MITRE ATT&CK techniques helps the detection team. You build the board in Bartman's in-browser Excel lab from a per-learner export.</p><p>No scanning is involved: you work from the organisation's own tool export. Part of the Bartman Cybersecurity track (Professional Certificate in Cybersecurity, LSBF).</p>

Tools: Vulnerability management, CVSS, CISA KEV, MITRE ATT&CK, Excel, Remediation SLAs