ID.RA-01 Vulnerabilities in assets are identified, validated, and recorded

Statement

Vulnerabilities in assets are identified, validated, and recorded

Example

Use vulnerability management technologies to identify unpatched and misconfigured software

Example

Assess network and system architectures for design and implementation weaknesses that affect cybersecurity

Example

Review, analyze, or test organization-developed software to identify design, coding, and default configuration vulnerabilities

Example

Assess facilities that house critical computing assets for physical vulnerabilities and resilience issues

Example

Monitor sources of cyber threat intelligence for information on new vulnerabilities in products and services

Example

Review processes and procedures for weaknesses that could be exploited to affect cybersecurity

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final