+6.6.1. The relevant entities shall specify and apply procedures, coherent with the change …
|
6.6.1. The relevant entities shall specify and apply procedures, coherent with the change …
|
6.6.1.
|
The relevant entities shall specify and apply procedures, coherent with the change management procedures referred to in point 6.4.1 as well as with vulnerability management, risk management and other relevant management procedures, for ensuring that:
|
(a)
|
security patches are applied within a reasonable time after they become available;
|
|
(b)
|
security patches are tested before being applied in production systems;
|
|
(c)
|
security patches come from trusted sources and are checked for integrity;
|
|
(d)
|
additional measures are implemented and residual risks are accepted in cases where a patch is not available or not applied pursuant to point 6.6.2.
|
|
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
Linked Issues
|