NIST SP 800-171 3.11.2: Vulnerability Scanning

Assess that the organization scans for vulnerabilities in organizational systems and applications periodically and when new vulnerabilities affecting those systems and applications are identified.

Other controls in Risk Assessment

171-RA-1 Risk Assessment
171-RA-2 Vulnerability Scanning and Remediation
3.11.1 Risk Assessments
A.03.11.01 Risk Assessment Process
A.03.11.02 Vulnerability Monitoring Assessment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171 controls