Management of technical vulnerabilities
A.8.8
-
Last updated
Applicable
Catalog reference
Identify, assess, and remediate technical vulnerabilities in systems and software in a timely way, with priority based on risk.
Narrative — how we satisfy this requirement
Vulnerability scans run every quarter and critical patches have a seven-day target, which is not yet met on all customer endpoints.