NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning
Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning 3.5.1a: Routine patching: phased deployment with canary assets

What does 3.5.1a require?

Organisations should consider phased routine deployments in which a small subset of assets receives a patch first and acts as a canary for problems and operational impact; the rollout widens once the canaries show minimal impact, and problems or a substitute response such as a temporary mitigation are handled before expansion. Larger user-facing rollouts may use several rounds, for example technically skilled users for a few days and then early adopters representative of the wider user community for some weeks.

Maintained by Gerard Blokdyk

Other controls in Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning controls