When someone mentions vulnerability management, what immediately comes to mind? Probably patching, for one. But don't fall into a trap: There's more to vulnerabilities than just patching, so it's important to take a holistic focus toward VM. This session will review some of the key elements of vulnerability management that patching doesn't cover, including: asset management, application security and contending with open-source code and end-of-life software.