| Security relevant software updates must be installed promptly and updated in order to mitigate the exploitation of known vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling, must also be addressed expeditiously. By requiring the automated update of application software on a periodic schedule, flaws and newly discovered attack vendors will be remediated in a timely manner.
This requirement applies to flaw remediation systems. Flaw remediation is not a function of the IDPS. |
