CCI-001068

The organization employs automated mechanisms to compare the results of vulnerability scans over time to determine trends in information system vulnerabilities.

Implementation Guidance

The organization being inspected/assessed must configure and implement automated mechanisms which provide the capability to compare the results of vulnerability scans over time to determine trends in information system vulnerabilities.

Validation Procedures

The organization conducting the inspection/assessment validates the organization is employing automated mechanisms to compare the results of vulnerability scans over time to determine trends in information system vulnerabilities.

Compelling Evidence

1.) Standard operating procedure (SOP). 2.) Reference to standard operating procedure (SOP) section on the automated process for comparing vulnerability scan results.

The controls below (if any) were marked by NIST as being related to CCI-001068.