Australian Information Security Manual ISM-1696: Patches, updates or other vendor mitigations for vulnerabilities in operating systems of w

Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within 48 hours of release when vulnerabilities are assessed as critical by vendors or when working exploits exist.