RS.AN-05 Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. …

Statement

Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers)

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final