Vulnerability management by definition is the "cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities". Vulnerability management is a pro-active approach to managing network security. It includes processes for Patching vulnerabilities: This is the process of getting patches -- usually from the vendors of the affected software or hardware -- and applying them to all the affected areas in a timely way. Vulnerability management is a pro-active approach to managing network security. It includes processes for Checking for vulnerabilities, Identifying vulnerabilities, Verifying vulnerabilities, Mitigating vulnerabilities, Patching vulnerabilities