INF.13.A23 Integration of TBM into Vulnerability Management (S)
TBM systems and systems managed by TBM SHOULD be continuously monitored for possible vulnerabilities. For this purpose, information on vulnerabilities that have become known SHOULD be obtained regularly and taken into account accordingly. This SHOULD include a review of the configuration of the systems at hand to determine whether it offers a favourable environment to known vulnerabilities. Furthermore, it SHOULD be decided for which systems vulnerability scans should be carried out regularly, or at least when the systems are put into operation and in case of major system changes. For vulnerability scans, the scan depth SHOULD be specified. Whether a passive or an active scan is to be performed SHOULD also be specified. In production environments, passive scans SHOULD be preferred. Active scans SHOULD only be performed in production environments if they are necessary and personnel are called in to resolve any errors or failures that may occur as a result of the scan.
1. Pregled
1.1 Reference
1.2 Utvrđeni zahtjevi
1.3 Povezani propisi
2. Utvrđeni zahtjevi
3. Povezani propisi
Povezani zadaci
|