NIST SP 800-128
Monitoring

NIST SP 800-128 SecCM-MONITOR-3: Vulnerability Identification and Remediation

Identify vulnerabilities arising from configuration weaknesses, missing patches, or end-of-life software through scanning and threat intelligence, and remediate within risk-based timeframes documented in policy.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Monitoring

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.