CVSS as a Framework, Not a Score

The venerable system has served us well but is now outdated. Not that it’s time to throw the system away — use it as a framework to measure risk using modern, context-based methods.