# Guides

Guides

Practical explanations of vulnerability scores, the DEFCON level and what the NIS2 directive asks for.

[CVSS, EPSS and KEV: how to use them together Three different measures to decide which vulnerabilities to fix first: how severe it is, how likely it is to be exploited, whether it is already exploited.](https://defencelevel.com/guides/cvss-epss-kev)[How to read the DEFCON level The level of the day shows at a glance how serious the cyber threat is: what each level means, what to do and how to read the briefing.](https://defencelevel.com/guides/defcon)[NIS2 and vulnerability management What the NIS2 directive asks about vulnerabilities, what it means in practice and where a service that tells you every day which ones matter can help.](https://defencelevel.com/guides/nis2)

---

Web page: https://defencelevel.com/guides