VM-04—Vulnerability Scans: Trend Analysis
>Control Description
Theme
Type
Policy/Standard
Vulnerability Management Policy>Implementation Guidance
1. Ensure that a process has been defined and documented for reviewing vulnerability trends. 2. Ensure that appropriate SLAs are defined to remediate high and moderate vulnerabilities in 30 and 90 days. 3. Ensure the results of these reviews are included in risk assessments.
>Testing Procedure
1. Inspect and validate that a process has been defined and documented for reviewing vulnerability trends. 2. Validate that appropriate SLAs are defined to remediate high and moderate risk vulnerabilities in 30 and 90 days. 3. For a sample of vulnerabilities, validate whether medium and high risk vulnerabilities were remediated within the SLA.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.