vpm-01-vulnerability&patchmanagementprogramvpmp.md

SCF - VPM-01 - Vulnerability & Patch Management Program (VPMP)

Mechanisms exist to facilitate the implementation and monitoring of vulnerability management controls.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2

ISO 27002

• A.8.8

NIST 800-53

• SI-2
• SI-3

Control questions

Does the organization facilitate the implementation and monitoring of vulnerability management controls?