ID.RA-01 Vulnerabilities in assets are identified, validated, and recorded

Statement

Vulnerabilities in assets are identified, validated, and recorded

Guidance

Use vulnerability management technologies to identify unpatched and misconfigured software

Guidance

Assess network and system architectures for design and implementation weaknesses that affect cybersecurity

Guidance

Review, analyze, or test organization-developed software to identify design, coding, and default configuration vulnerabilities

Guidance

Assess facilities that house critical computing assets for physical vulnerabilities and resilience issues

Guidance

Monitor sources of cyber threat intelligence for information on new vulnerabilities in products and services

Guidance

Review processes and procedures for weaknesses that could be exploited to affect cybersecurity

1. Resumen

1.1 Referencias

• 2.1 Risk management framework
• 6.5 Security testing
• 6.10 Vulnerability handling and disclosure

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final