VPM-06
Vulnerability Scanning
Description
Mechanisms exist to detect vulnerabilities and configuration errors by routine vulnerability scanning of systems and applications.
Control Question
Does the organization detect vulnerabilities and configuration errors by routine vulnerability scanning of systems and applications?
Control Metadata
Domain:
Vulnerability & Patch Management
Validation Cadence:
Semi-Annual
Evidence Request List:
E-VPM-05
Framework Mappings
This control maps to the following compliance frameworks
MAS TRM
13.1.113.1.2