3.14.1 Report Information & System Flaws

3.14.1 Identify, report, and correct information and system flaws in a timely manner.

To go back to the NIST 800-171 Controls page, click here.

Guides

• NIST SP 800-40 – Guide to Enterprise Patch Management Technologies
• SANS Institute – A Practical Methodology for Implementing a Patch Management Process

Example Tools

• Windows Server Update Services
• Red Hat Satellite
• SolarWinds
• Symantec Patch Management Solution

Sample Policy & Procedures

• North Carolina State University – RUL 08.00.14 – System and Software Security Patching Standard

Additional Lessons Learned

• Rapid7 – Security Patching

Videos

• YouTube – How To Implement a Patch Management Process

Vendor Documentation

• Plan your WSUS deployment