At ROCon 2025, Kunal Modasiya (SVP, Product Management, Qualys) and Christy Sluder (Manager, HCA Healthcare) discuss how organizations can modernize traditional Vulnerability Management (VM) programs into Continuous Threat Exposure Management (CTEM) frameworks that drive measurable business value. This session reframes how security teams approach risk — moving beyond CVSS scores and patch counts to a unified, financially aware model that connects exposure management, asset context, and business impact. Topics include: •How the Risk Operations Center (ROC) enhances visibility across known and unknown assets •Quantifying cyber risk in business and financial terms •Integrating ETM (Enterprise TruRisk Management) with AI-powered analytics •The role of automation and compensating controls in risk reduction •How HCA Healthcare scaled visibility across 1.5 million+ assets using Qualys Christy shares HCA’s real-world success reducing remediation time by 33%, tightening detection cycles, and building a collaborative culture between security, IT, and operations. Recorded live at ROCon 2025 – The Risk Operations Conference, presented by Qualys.

 149      3