Guides
- NIST SP 800-40 – Guide to Enterprise Patch Management Technologies
- SANS Institute – A Practical Methodology for Implementing a Patch Management Process
3.14.1 Identify, report, and correct information and system flaws in a timely manner.
To go back to the NIST 800-171 Controls page, click here.