The system must support automated patch management tools to facilitate flaw remediation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36735	WN12-GE-000024	SV-51583r2_rule		Medium

Description
The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed.

STIG	Date
Windows Server 2012 / 2012 R2 Member Server Security Technical Implementation Guide	2016-12-19

Details

Check Text ( C-46846r1_chk )
Verify the organization has an automated process to install security-related software updates. If it does not, this is a finding.

Fix Text (F-44712r1_fix)
Establish a process to automatically install security-related software updates.