A security analyst is assessing the risks associated with various vulnerabilities on production servers. Which of the following is the BEST indicator for prioritizing vulnerabilities based on organizational context?
Assessing mission-criticality of the affected systems
Reviewing industry-standard patch management processes
Implementing a vulnerability scanning schedule
Performing penetration testing exercises