NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning
Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning 3.1.1: Reduce the number of vulnerabilities entering the environment

What does 3.1.1 require?

Organisations should work to cut the vulnerabilities introduced into their environments, shrinking the attack surface and the patching load. Means include hardening software through least privilege and least functionality (removing or switching off unneeded services, features and components), choosing software and development partners with a record of fewer vulnerabilities, fast fixes, reliable patches and open security communication, using managed services where feasible, and picking stacks or platforms that carry fewer vulnerabilities over time, such as a small container rather than a full operating system.

Maintained by Gerard Blokdyk

Other controls in Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning controls