Vulnerability management is an essential component of information security programs and is critical for Coastal Carolina University to address responsibly in compliance with federal and state laws and policies. The purpose of this policy is to ensure the establishment of a process to effectively conduct vulnerability assessment and scanning of networked assets in order to determine potential vulnerabilities within the University technology infrastructure and information system components, which could be exploited by attackers to gain unauthorized access, disrupt business operations, and steal or leak sensitive data. In addition, this policy ensures that the remediation of identified vulnerabilities will provide appropriate protection against threats (such as cyberattacks, denial of service, malware, etc.) that could adversely affect the security of the information system or data entrusted on the information system.