14.7: Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates

CSF v1.1 References:

PF v1.0 References:

Group:

Info icon.

Control is new to this version of the control set.

Control Statement

Train workforce to understand how to verify and report out-of-date software patches or any failures in automated processes and tools. Part of this training should include notifying IT personnel of any failures in automated processes and tools.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]