KEV is a filter, not a to-do list
CISA's Known Exploited Vulnerabilities catalogue is the best triage input most teams have, and the most commonly misused. A note on what it does and does not tell you.
St. John’s, Newfoundland and Labrador
Cloud security, compliance, and the tools in between
Personal notes of Jeff Barnes. During the day I work on Azure Architecture and Security - currently with the Office of the Chief Information Officer in Newfoundland and Labrador, and before that across federal departments and Shared Services Canada.
Outside the day job I build open-source security tooling under Exploits Bay Cyber Corp — mostly Azure compliance automation and vulnerability triage. Those live over on projects.
Recent writing
All posts →Compliance automation is mostly an evidence problem
The hard part of automating a control assessment is not evaluating the control. It is producing something an assessor will accept as proof.