Beyond the CVE Count: The Real State of Vulnerability Management - Charles Loring - CSP #228
SC Media (CISO Stories), Thursday, September 17th, 2026
Public sector CISO on risk-based vulnerability prioritisation and the limits of AI in patch management.
Chuck Loring of the Lee County Clerk of Circuit Court & Comptroller joins CISO Stories to discuss how budgets, staffing, legacy technology, and mission priorities shape vulnerability management across public and private sectors.
The conversation challenges the idea that AI alone will solve the problem and identifies where it can genuinely help. Loring argues for risk-based prioritisation as vulnerability volumes continue to surge, and explores what public and private organisations can learn from each other.
The core message: effective vulnerability management is about addressing what poses the greatest risk, not patching everything.