The enemy of vulnerability management? Unrealistic expectations

There is no reliable data based on which to determine by when you should remediate certain vulnerabilities. One can rely on the intelligence and data at hand, and based on what other companies have implemented successfully, find good places to start.