A vendor patch for a city payment appliance is delayed, so security segments the device and documents a time-bound exception while continuing to pursue the patch. Which remediation approach does this describe?
Select an answer to reveal the explanation.
Short Explanation
When the patch truck is late, you still fence off the risky box and write down the temporary exception—like closing a lane and posting a detour. Patch first when you can; compensate and document when you cannot.
Full Explanation
Vulnerability response prioritizes remediation such as patching; when a vendor fix is delayed, compensating controls like network segmentation reduce exposure, and formal exceptions record residual risk and review dates. Inventory deletion or disabling monitoring only hides risk. Unlimited acceptance of public exposure without compensating controls is not an appropriate default path.