The operating system must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, 30 days, and annually, for external scans by Computer Network Defense Service Provider (CNDSP).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-203662	SRG-OS-000191-GPOS-00080	SV-203662r939261_rule		Medium

Description
Without the use of automated mechanisms to scan for security flaws on a continuous and/or periodic basis, the operating system or other system components may remain vulnerable to the exploits presented by undetected software flaws. To support this requirement, the operating system may have an integrated solution incorporating continuous scanning and/or periodic scanning using third-party tools.

STIG	Date
General Purpose Operating System Security Requirements Guide	2023-12-01

Details

Check Text ( C-3787r939259_chk )
Verify the operating system employs automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, 30 days, and annually, for external scans by CNDSP. If it does not, this is a finding.

Fix Text (F-3787r939260_fix)
Configure the operating system to employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, 30 days, and annually, for external scans by CNDSP.