FortiSOAR™ OT - Vulnerability Management Version 2.0.0 Release Highlights

[srivastavad]

1. ICS Advisory Correlation at Product Level:

   • Use Case:
     • Scenario: A critical security vulnerability is identified in a specific product within your industrial control systems.
   • Benefit: Correlating ICS advisories at the product level allows for more granular identification and targeted response to vulnerabilities. This ensures that the appropriate teams can focus on specific affected products, reducing response time and minimizing the potential impact on operations.

2. KEV Alerts for Identified CVEs:

   • Use Case:
     • Scenario: A known exploited vulnerability (KEV) with a published CVE is discovered within your OT environment.
   • Benefit: Generating KEV alerts for identified CVEs provides immediate awareness of actively exploited vulnerabilities. This allows security teams to prioritize and respond swiftly to mitigate the risk of exploitation, preventing potential breaches and disruptions to critical systems.

3. Remediation Time (SLA) Implementation:

   • Use Case:
     • Scenario: An organization is required to adhere to a specific remediation timeframe outlined in compliance regulations, such as BOD 22-01.
   • Benefit: Introducing SLA for alerts ensures that vulnerabilities are addressed within specified timelines, aligning with regulatory requirements. This helps organizations maintain compliance, avoid potential penalties, and enhance overall cybersecurity posture.

4. Schedule Enhancements:

   • Use Case:
     • Scenario: Security teams need to stay updated on the latest ICS advisories published by CISA.
   • Benefit: New schedules triggering daily ingestion of ICS advisories keep security teams informed about the latest threats relevant to their environment. Enhanced schedules for BOD 22-01 notifications ensure timely reporting, enabling proactive management of KEV alerts and compliance.

Note: We encourage all users to review the release notes thoroughly for a comprehensive understanding of the changes and improvements.

Reference Link: https://fortisoar.contenthub.fortinet.com//detail.html?entity=oT-VulnerabilityManagement&version=2.0...