The request
“Create a vulnerability management ERD with Asset, Vulnerability, Vendor, Patch, AssetVulnerability, and VulnerabilityPatch tables, the shown keys and attributes, assets linked to vulnerabilities, patches to vendors, and vulnerabilities to recommended patches.”
Then tryAdd scan runs.Add remediation owners.
What is in this drawing
Read the decisions behind it.
01
Many-to-many between assets and vulnerabilities
02
Many-to-many between vulnerabilities and patches
03
Vendor as separate entity for patch sourcing
04
Remediation tracking in join table
When designing a database for vulnerability management and patch compliance reporting.
More like this