CISA Cyber Resilience Review (CRR) v4.0
Vulnerability Management – CISA Cyber Resilience Review (CRR) v4.0

CISA Cyber Resilience Review (CRR) v4.0 VM.1: Preparation for vulnerability analysis and resolution

What does VM.1 require?

A vulnerability analysis and resolution strategy exists, with standard tools or methods to identify vulnerabilities in assets, detect malicious code, detect unauthorised mobile code, and monitor assets for unauthorised personnel, connections, devices and software.

Maintained by Gerard Blokdyk

Other controls in Vulnerability Management – CISA Cyber Resilience Review (CRR) v4.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.