Assessment Objective
Determine if:
- RA-05(02) the system vulnerabilities to be scanned are updated [Selection (one or more): [Assignment: frequency] ; prior to a new scan; when new vulnerabilities are identified and reported].
Assessment Methods
Examine
- Procedures addressing vulnerability scanning
- assessment report
- vulnerability scanning tools and associated configuration documentation
- vulnerability scanning results
- patch and vulnerability management records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with vulnerability scanning responsibilities
- organizational personnel with vulnerability scan analysis responsibilities
- organizational personnel with security responsibilities
- system/network administrators
Test
- Organizational processes for vulnerability scanning
- mechanisms/tools supporting and/or implementing vulnerability scanning
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | RA-05(02) [L] Update Vulnerabilities to Be Scanned |