Vulnerability Management
(
)
A vulnerability management plan is developed and implemented
stereotype
ControlObjective
namespace
NIST_CSF
status
MANDATORY
refCode
PR.IP-12
cis_crc
4, 18, 20
cobit
BAI03.10, DSS05.01, DSS05.02
iso27001
A.12.6.1, A.14.2.3, A.16.1.3, A.18.2.2, A.18.2.3
nist-sp800-53
RA-3, RA-5, SI-2
PR.IP Information Protection Processes & Procedures
Information Protection Processes & Procedures
Vulnerability Management