NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning
Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning 3.2.2: Use the inventory capabilities built into platforms and assets

What does 3.2.2 require?

Organisations should draw on inventory features already present in their platforms and assets wherever feasible, such as cloud platform APIs that stream software and platform details continuously, alongside vulnerability scans and passive network monitoring for discovery on local networks. Where scans feed the software inventory, they need authenticated access to detect software changes reliably.

Maintained by Gerard Blokdyk

Other controls in Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning controls