Management implements automated patch management so that all network components including virtual machines, routers, switches, mobile devices and firewalls are updated, scans for vulnerabilities periodically, and runs a patch process that monitors patch availability, evaluates patches against the threat and network environment, prioritises them by class of system, obtains, tests and securely installs them including in virtual environments, documents exceptions for patches delayed or declined, applies production patches to the disaster recovery environment promptly, updates inventories and recovery plans, backs up before patching and restricts patching to defined windows.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.