Joshua Shoffner (Oklahoma Baptist University), Thomas Carter (Oklahoma Baptist University), and Geoff Wilson (Go Security Pro)​​​​​​

Vulnerability management in higher education is complicated by decentralized environments, legacy systems, limited staffing, and the tension between openness and security. This session explores where programs break down—from weak visibility and tooling to prioritization—and how institutions can adopt more effective, risk-informed practices. It also addresses recent changes to the NIST National Vulnerability Database that will require teams to rely less on CVSS scores alone. Attendees will leave with practical ideas for reducing noise, improving accountability, and focusing remediation where it matters most.