+MA-03(06) Software Updates and Patches

MA-03(06) Software Updates and Patches

Control

Inspect maintenance tools to ensure the latest software updates and patches are installed.

Discussion

Maintenance tools using outdated and/or unpatched software can provide a threat vector for adversaries and result in a significant vulnerability for organizations.

Assessment Objective

maintenance tools are inspected to ensure that the latest software updates and patches are installed.

Assessment Method

Examine

Maintenance policy procedures addressing system maintenance tools system maintenance tools and associated documentation list of personnel authorized to use maintenance tools maintenance tool usage records maintenance records system security plan other relevant documents or records

Interview

Organizational personnel with system maintenance responsibilities organizational personnel with information security responsibilities

1. Übersicht

Bezeichnung	Standard

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen
Quelle	Anforderung

3. Zugehörige Regulierungen

Regulierungen
Quelle	Regulierung

Verknüpfte Vorgänge

Verknüpfungen
Verknüpfungstyp	Vorgang
is blocked by	MA-03(06) Software Updates and Patches – Assessment Procedure
is blocked by	Maintenance Tools

NIST -
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final