Test and Development Zone B STIG Version Comparison

There are 1 differences between versions v1 r4 (July 27, 2018) (the "left" version) and v1 r6 (April 27, 2022) (the "right" version).

Check ENTD0100 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.

The regular view of the left check and right check may be easier to read.

Title

Development systems must be part of a patch management solution. solution and all systems must be up to date.

Check Content

Determine whether the organization has a patch management solution in place to apply security patches released by the vendor. vendor, and that all systems are up to date. If a patch management solution has not been implemented and is not functioning to update development systems with the latest patches, or all systems are not up to date, this is a finding. If finding. there isn't any application development occurring in the zone environment, this requirement is not applicable.

Discussion

Major software vendors release security patches and hotfixes to their products when security vulnerabilities are discovered. It is essential that these updates be applied in a timely manner to prevent unauthorized individuals from exploiting identified vulnerabilities.

Fix

Implement a patch management solution to keep development systems up to date with the latest security patches released by the vendor.