Continuous process of identifying, classifying, prioritizing, and remediating vulnerabilities in IT infrastructures. Includes periodic scans, patch lifecycle management, CVSS-based risk analysis, integration with asset inventory, and mitigation workflows. Essential for maintaining corporate security posture over time.