isidaten implements new ISO Standard 20153:2025 with vulnerability management module

isidaten implements the brand-new ISO/IEC 20153:2025 standard for CSAF-compliant vulnerability management and sets an important milestone in standardized cybersecurity. The recently published standard revolutionizes how organizations manage and assess vulnerabilities.

Revolutionary Automation through CSAF Standard

The new ISO standard is based on the Common Security Advisory Framework specification (CSAF v2.0) and enables fully automated processing of vulnerability notifications. Instead of manually sifting through confusing security alerts, the system automatically converts them into machine-readable JSON advisories.

Groundbreaking Features Overview:

• Automated Advisory Intelligence: Aggregation of vulnerability alerts from decentralized CSAF feeds from BSI, CISA, Cisco and other renowned sources in real-time
• VEX Integration: Support for the Vulnerability Exploitability Exchange standard for precise assessment of actual CVE exploitability
• SBOM Compatibility: Seamless integration with Software Bill of Materials for comprehensive asset transparency
• Intelligent Correlation: Automatic linking of CVSS, EPSS and asset criticality assessments
• Workflow Automation: Integrated patch orchestration from ticket creation to success verification

Regulatory Future-Proofing

The new module already meets today's requirements of upcoming regulations such as NIS2, CRA and ISO 27001 through traceable, standardized reports and compliance evidence.

Measurable Efficiency Gains

Thanks to machine-readable advisories, companies can reduce their manual analysis steps by up to 80%. At the same time, decentralized CSAF feeds prevent single-point-of-failure risks that can arise, for example, during NVD outages.

More information about the new ISO standard can be found in the official BSI press release.

Discover our innovative Vulnerability Management Module and learn how you can prepare your company for the future of cybersecurity.