Susan and Nick talk about Nick's must-haves for vulnerability management programs, and the best practices for whoever owns that process in an organization.