Who Owns Threat And Exposure Management In Your Organization?
Security Boulevard, September 19,2025
A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It's time to build the team of the future - discover what 'good' looks like and how to get there.
Key takeaways
- Teams are fragmented, with most organizations lacking a dedicated vulnerability or exposure management team.
- Conflicting priorities slow progress as IT and security teams often have different KPIs, causing delays.
- Success requires collaboration, bringing key security functions under one umbrella and fostering cooperation across teams, not just tools.
- Start small and build momentum by proving value with one team, unit, or use case before expanding.
- Leverage existing resources, using an exposure management platform to maximize your people and tools.
Do you know who owns threat and exposure management in your organization?