NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning
Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning 3.6c: Refresh low-level metrics frequently and keep them accurate

What does 3.6c require?

Organisations should update their low-level metrics often and make them as accurate as possible, since errors flow into the enterprise metrics: monthly-only scanning understates the vulnerabilities present, and passive or unauthenticated scanning underreports compared with authenticated scanning, skewing the picture of the programme.

Maintained by Gerard Blokdyk

Other controls in Section 3: Recommendations for enterprise patch management planning – NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NIST SP 800-40 Rev 4 - Guide to Enterprise Patch Management Planning controls