Vulnerability management is the continuous process of identifying, classifying, prioritizing, remediating, and verifying security vulnerabilities across the environment.
Vulnerability management = scan (find) → prioritize (CVSS + context) → remediate (patch/mitigate) → verify (rescan). Never-ending cycle. Track metrics: mean time to remediate (MTTR), % critical vulns remediated within SLA.