+PSS-02.03B

PSS-02.03B

The severity of identified vulnerabilities is assessed according to defined criteria and measures are taken to immediately eliminate or mitigate them.

Supplementary information

Known vulnerabilities in externally related system components (e.g. operating systems) used for the development and provision of the cloud service but not going through the cloud service provider's software development process are the subject of criterion OPS-25 (Managing Vulnerabilities, Incidents and Errors - Vulnerability Scans).

1. Vue d’ensemble

Intitulé	Norme

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences
Source	Exigence

3. Réglementations associées

Réglementations
Source	Réglementation

Tickets liés

Liens
Type de lien	Ticket
is blocked by	Vulnerability Ranking
is blocked by	Vulnerability Remediation Process

BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)