RA-5(6): Automated Trend Analyses

Control Family:

Risk Assessment

Parent Control:

RA-5: Vulnerability Scanning

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.RA-1
PR.IP-12
DE.CM-8
DE.DP-4
RS.CO-3
RS.MI-3

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
RA-5(6): Automated Trend Analyses

Control Statement

The organization employs automated mechanisms to compare the results of vulnerability scans over time to determine trends in information system vulnerabilities.