204 Information Security Vulnerability Management

DRAFT

Contact the Office of Information Security for information about the draft in progress.

The Information Security Vulnerability Management Standard includes information about:

  • The vulnerability management process
  • Frequency of scans
  • The use of agents or authenticated scans
  • Types of scans
  • Time to remediate
  • Zero-Day vulnerabilities, regular vulnerability reviews, and external collaboration
  • Reporting