Remediation timelines

Cohesity's field CISO ranks KEV above EPSS above CVSS in a tiebreaker she would hand an analyst

Joye Purser answered the question most vulnerability programs only argue about mid-outage. She attached hours and dollars to the answer instead of leaving it as scoring philosophy. The preconditions are where it gets expensive.