CCI-001234

The organization defines a frequency for employing automated mechanisms to determine the state of information system components with regard to flaw remediation.

Implementation Guidance

DoD has defined the frequency as continuously with HBSS; 30 days for any additional internal network scans not covered by HBSS; annually for external scans by (Computer Network Defense Service Provider) CNDSP.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as continuously with HBSS; 30 days for any additional internal network scans not covered by HBSS; annually for external scans by (Computer Network Defense Service Provider) CNDSP.

Compelling Evidence

Automatically compliant.

The controls below (if any) were marked by NIST as being related to CCI-001234.