204 Information Security Vulnerability Management

The Information Security Vulnerability Management Standard includes information about:

  • The vulnerability management process
  • Frequency of scans
  • The use of agents or authenticated scans
  • Types of scans
  • Time to remediate
  • Zero-Day vulnerabilities, regular vulnerability reviews, and external collaboration
  • Reporting