Exposure on Hector Herrerahttps://www.hectorherrera.pro/en/tags/exposure/Recent content in Exposure on Hector HerreraHugoen-USFri, 07 Aug 2026 17:40:00 -0500From vulnerabilities to priorities: designing a context-based RBVM approachhttps://www.hectorherrera.pro/en/work/designing-context-based-exposure-vulnerability-prioritization/Fri, 07 Aug 2026 00:00:00 +0000https://www.hectorherrera.pro/en/work/designing-context-based-exposure-vulnerability-prioritization/An RBVM approach connecting data quality, asset criticality, exposure, severity, threat, controls, remediation constraints, ownership, and residual risk.Having 10,000 vulnerabilities does not mean having 10,000 prioritieshttps://www.hectorherrera.pro/en/ideas/having-10000-vulnerabilities-does-not-mean-having-10000-priorities/Fri, 07 Aug 2026 17:40:00 -0500https://www.hectorherrera.pro/en/ideas/having-10000-vulnerabilities-does-not-mean-having-10000-priorities/Vulnerability management creates value when it turns thousands of findings into a manageable number of decisions that can be executed, validated, and explained.What information is missing when a vulnerability only has a CVSS scorehttps://www.hectorherrera.pro/en/ideas/what-information-is-missing-when-a-vulnerability-only-has-cvss/Fri, 07 Aug 2026 17:30:00 -0500https://www.hectorherrera.pro/en/ideas/what-information-is-missing-when-a-vulnerability-only-has-cvss/A CVSS score can tell us a great deal about a vulnerability and very little about what an organization should do first.