STA-12: add countermeasures

[samz-cs]

add:
Enterprise:

• To reduce the opportunity for an attacker to exploit a patched vulnerability, ensure security updates are applied in a timely manner by configuring automated installation of or, at a minimum, automatic notification of the availability of security updates.

• Purchase devices from vendors/carriers who have committed to providing timely updates or who have known track records for prompt updates.