Days of Risk

Jeff Jones, writing in CSO, gives a basic guide to "Days of Risk."

An excerpt:

Days-of-Risk (DoR) is a measurement of the time period of greatly increased risk from when a vulnerability has been publicly disclosed (and thus known and available to millions of script-kiddies and other malicious attackers) until a vendor patch is available to close the vulnerability.