14.7: Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
CSF v1.1 References:
PF v1.0 References:
Control is new to this version of the control set.
Control Statement
Train workforce to understand how to verify and report out-of-date software patches or any failures in automated processes and tools. Part of this training should include notifying IT personnel of any failures in automated processes and tools.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]