A solicitação
“Create a vulnerability management ERD with Asset, Vulnerability, Vendor, Patch, AssetVulnerability, and VulnerabilityPatch tables, the shown keys and attributes, assets linked to vulnerabilities, patches to vendors, and vulnerabilities to recommended patches.”
Depois, tenteAdd scan runs.Add remediation owners.
O que há neste desenho
Entenda as decisões por trás dele.
01
Many-to-many between assets and vulnerabilities
02
Many-to-many between vulnerabilities and patches
03
Vendor as separate entity for patch sourcing
04
Remediation tracking in join table
When designing a database for vulnerability management and patch compliance reporting.