A patch management process for tracking, evaluating and installing cyber security patches for applicable Cyber Assets, whose tracking includes identifying the source or sources the entity tracks for the release of patches for updateable assets with a patching source.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.