Arrange the following vulnerability management phases in their correct sequential order, from initial asset identification to ongoing oversight: - Discover (catalog network assets and services) - Identify (scan assets to detect vulnerabilities) - Assess (evaluate the severity and potential impact of findings) - Prioritize (rank vulnerabilities to determine treatment order) - Remediate (apply patches or compensating controls) - Verify (rescan to confirm mitigations were effective) - Monitor (conduct continuous oversight for changes and new vulnerabilities)

### The order 1. **Discover**: Establish what assets and services exist. 2. **Identify**: Find weaknesses and exposure on those assets. 3. **Assess**: Estimate likelihood and potential impact. 4. **Prioritize**: Decide which findings need attention first. 5. **Remediate**: Apply fixes or compensating controls. 6. **Verify**: Confirm that remediation worked. 7. **Monitor**: Watch for recurrence, new weaknesses, and exceptions. ### The concept The order prevents organizations from treating scan output as a complete risk decision. Discovery provides context; assessment makes the finding meaningful; prioritization directs effort. Verification tests the result, and monitoring keeps the process current. Organizations may repeat steps as assets or threats change. ### Remember You need asset context before risk ranking, and evidence of success after remediation.