NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning
Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning 3.1.2: Deploy applications so that patching is less likely to disrupt operations

What does 3.1.2 require?

Organisations should consider deployment patterns in which patching is a built-in, low-disruption part of the technology, for example modernising software to run in cloud-based containers rather than on on-premises server operating systems, or using toolchains that already rebuild an application on refreshed components and test the result ahead of production.

Maintained by Gerard Blokdyk

Other controls in Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning controls