Title

The system must support automated patch management tools to facilitate flaw remediation. (Cat II impact)

Discussion

The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed.

Check Content

Verify the organization has an automated process to install security-related software updates. If it does not, this is a finding.

Fix Text

Establish a process to automatically install security-related software updates.

Additional Identifiers

Rule ID:

Vulnerability ID: V-36735

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.