CCI-001236

The organization defines benchmarks for the time taken to apply corrective actions after flaw identification.

Implementation Guidance

DoD has defined the benchmarks as within the time period directed by an authoritative source (e.g. IAVM, CTOs, DTMs, STIGs).

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the benchmarks as within the time period directed by an authoritative source (e.g. IAVM, CTOs, DTMs, STIGs).

Compelling Evidence

Automatically compliant.

The controls below (if any) were marked by NIST as being related to CCI-001236.