+OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B)

OPS.1.1.3.A16 Regular Search for Information on Patches and Vulnerabilities (B)

The IT Operation Department MUST ensure it is regularly informed about vulnerabilities which become known in the firmware, operating systems, applications, and services used. The identified vulnerabilities MUST be rectified as soon as possible.

As long as no appropriate patches are available, other appropriate safeguards to protect the systems affected MUST be implemented depending on the severity of the vulnerabilities and basic threats. If this is not possible, it SHOULD be ensured that the corresponding hardware, relevant operating systems, and applications and services are no longer used.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.25 Failure of Devices or Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware