RA-5(2): Update By Frequency / Prior To New Scan / When Identified

Control Family:

Risk Assessment

Parent Control:

RA-5: Vulnerability Scanning

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.RA-1
PR.IP-12
DE.CM-8
DE.DP-4
RS.CO-3
RS.MI-3

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5:
RA-5(2): Update Vulnerabilities to Be Scanned

Control Statement

The organization updates the information system vulnerabilities scanned [Selection (one or more): [Assignment: organization-defined frequency]; prior to a new scan; when new vulnerabilities are identified and reported].

Control Statement

Related Controls

Critical Security Controls Version 8