Most organizations don't do Vulnerability Assessment, or confuse them with something else, or do them but not very effectively, imaginatively, or proactively, thinking like the bad guys. Here is some practical advice for how to do better from a Vulnerability Assessor with 35+ years of experience.

1. Recorded webinars on a better approach to vulnerability assessment:
1. RG Johnston, “Vulnerability Assessment”, Interview on Andrew Lanning’s Security
Matters Video Program, ThinkTech Hawaii, September 8, 2020,
https://youtu.be/KesyK1KKMHk and http://thinktechhawaii.com
2. RG Johnston, “Vulnerability Assessment, Keynote speaker for a webinar by the
World Institute for Nuclear Security (WINS), August 24, 2020.
https://app.livestorm.co/world-institute-for-nuclear-security
(There was a record number of participants. 80% voted very good or exceptional for the
webinar, 20% good, and 2% poor.)
3. RG Johnston, "Insider Threat Mitigation: A Vulnerability Assessors Perspective",
iThreat Webinar, July 22, 2020, https://ithreat.com/insider-threat-mitigation-a-
vulnerability-assessors-perspective-roger-johnston-with-mike-gips/
New book available on Amazon.com in multiple countries:
https://www.amazon.com/dp/B08C9D73Z9