The network element must be configured to implement automated mechanisms on an organization-defined frequency to determine the state of information system components with regard to flaw remediation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-27413	SRG-NET-000242	SV-34721r1_rule		Medium

Description
It is imperative that the activity promptly installs security-relevant software updates to mitigate the risk of new vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling, are also addressed expeditiously. By requiring that flaw remediation be incorporated into the configuration management process, it is the intent of this control that required/anticipated remediation actions are tracked and verified.

Description

It is imperative that the activity promptly installs security-relevant software updates to mitigate the risk of new vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling, are also addressed expeditiously. By requiring that flaw remediation be incorporated into the configuration management process, it is the intent of this control that required/anticipated remediation actions are tracked and verified.

STIG	Date
Network Security Requirements Guide	2011-12-28

Details

Check Text ( None )
None

Fix Text (None)
None