Overview
  1. ⚪03.01: Access Control
  2. ⚪03.02: Awareness and Training
  3. ⚪03.03: Audit and Accountability
  4. ⚪03.04: Configuration Management
  5. ⚪03.05: Identification and Authentication
  6. ⚪03.06: Incident Response
  7. ⚪03.07: Maintenance
  8. ⚪03.08: Media Protection
  9. ⚪03.09: Personnel Security
  10. ⚪03.10: Physical Protection
  11. ⚪03.11: Risk Assessment
  12. ⚪03.12: Security Assessment
  13. ⚪03.13: System and Communications Protection
  14. ⚪03.14: System and Information Integrity

Security Requirements for 03.11.03 Vulnerability Remediation⚪

Vulnerabilities discovered, for example, via the scanning conducted in response to 03.11.02, are remediated with consideration of the related assessment of risk. The consideration of risk influences the prioritization of remediation efforts and the level of effort to be expended in the remediation for specific vulnerabilities.

Evidence

  1. ⚪

    03.11.03.a

    Vulnerabilities are identified

  1. ⚪

    03.11.03.b

    Vulnerabilities are remediated in accordance with risk assessments