The network element must be configured to implement automated mechanisms on an organization defined frequency to determine the state of information system components with regard to flaw remediation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34207	SRG-NET-000242-DNS-NA	SV-44683r1_rule		Medium

Description
It is imperative that the activity promptly installs security-relevant software updates to mitigate the risk of new vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling, are also addressed expeditiously. By requiring that flaw remediation be incorporated into the configuration management process, it is the intent of this control that required/anticipated remediation actions are tracked and verified. Flaw remediation is not a function of DNS.

Description

It is imperative that the activity promptly installs security-relevant software updates to mitigate the risk of new vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling, are also addressed expeditiously. By requiring that flaw remediation be incorporated into the configuration management process, it is the intent of this control that required/anticipated remediation actions are tracked and verified. Flaw remediation is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42188r1_chk )
This is not a function of DNS.

Fix Text (F-38137r1_fix)
This requirement is NA for DNS. No fix required.