+OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B)

OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B)

The IT Operation Department MUST ensure it is regularly informed about vulnerabilities which become known in the firmware, operating systems, applications, and services used. The identified vulnerabilities MUST be rectified as soon as possible.

As long as no appropriate patches are available, other appropriate safeguards to protect the systems affected MUST be implemented depending on the severity of the vulnerabilities and basic threats. If this is not possible, it SHOULD be ensured that the corresponding hardware, relevant operating systems, and applications and services are no longer used.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware