The Information Security team operates a Vulnerability Management Program for University schools and departments. Our primary goal is to assist in the auditing, identification, and remediation of security vulnerabilities—reducing the impact of cyber attacks on our community’s server infrastructure.

With our vulnerability management tool, you will be able to discover and remediate vulnerabilities before malicious individuals use them to exploit and compromise the University’s systems or data.

Vulnerability Management Services

• Initial consultation to review documents, configurations, network diagrams, and interview stakeholders
• Initial vulnerability assessments to help pinpoint risks, identify a path forward, and serve as a starting point for your own team
• Documentation, reports, and additional consulting as needed after the assessment
• Access to use the vulnerability management tool, InsightVM, at no cost to you
• Quarterly or semi-annual health checks to help you keep track of progress

System Assessments and Remediation

Initial vulnerability assessments are designed to help you get started by scanning your servers for system vulnerabilities and software configuration issues such as zero day vulnerabilities, weak cypher configurations, weak passwords, or out-of-date software.

If you want to learn more and better understand the benefits of vulnerability management, please contact the Information Security Office at 773.702.CERT (2-2378) or itrisk@uchicago.edu to setup an initial consultation.