RA-5(6): Automated Trend Analyses

Control Family:

Risk Assessment

Parent Control:

RA-5: Vulnerability Monitoring and Scanning

CSF v1.1 References:

ID.RA-1
PR.IP-12
DE.AE-2
DE.CM-8
DE.DP-4
DE.DP-5
RS.AN-1
RS.MI-3

Baselines:

(Not part of any baseline)

Previous Version:

NIST Special Publication 800-53 Revision 4:
RA-5(6): Automated Trend Analyses

Control Statement

Compare the results of multiple vulnerability scans using [Assignment: organization-defined automated mechanisms].

Supplemental Guidance

Using automated mechanisms to analyze multiple vulnerability scans over time can help determine trends in system vulnerabilities and identify patterns of attack.