RA-5(10): Correlate Scanning Information

Control Family:

Risk Assessment

Parent Control:

RA-5: Vulnerability Scanning

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
RA-5(10): Correlate Scanning Information

Control Statement

The organization correlates the output from vulnerability scanning tools to determine the presence of multi-vulnerability/multi-hop attack vectors.