vpm-05-software&firmwarepatching.md

SCF - VPM-05 - Software & Firmware Patching

Mechanisms exist to conduct software patching for all deployed operating systems, applications and firmware.

Mapped framework controls

ISO 27002

• A.8.8

NIST 800-53

• SI-2
• SI-3

Control questions

Does the organization conduct software patching for all deployed operating systems, applications and firmware?