RV.2.1 Analyze each vulnerability to gather sufficient information about risk to plan its remediation or other risk response.

Statement

Analyze each vulnerability to gather sufficient information about risk to plan its remediation or other risk response.

Example 1:

Use existing issue tracking software to record each vulnerability.

Example 2:

Perform risk calculations for each vulnerability based on estimates of its exploitability, the potential impact if exploited, and any other relevant characteristics.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final