Details

OPTIONAL: Does the organization have a policy in place that dictates the required timeframe that patches must be applied to end point devices?

Supportive Information

The following resource is also helpful.

• https://controls-assessment-specification.readthedocs.io/en/latest

This control applies to the following type of system Unix.

References

• CSCv7|3.4

Source

• Tenable.com/audits