Best Practice Detail

13-8-8036

Network Operators, Service Providers should note that systems that are not compliant with the patching policy and these particular elements should be monitored on a regular basis.  These exceptions should factor heavily into the organization's monitoring strategy.  Vulnerability mitigation plans should be developed and implemented in lieu of the patches. If no acceptable mitigation exists, the risks should be communicated to management.

Status: Rollover New

References/Comments: Configuration guide for security from NIST (800-53 Rev. 3).

Historical events:

• Network Operators
• Service Providers
• Cable
• Internet/Data
• Satellite
• Wireless
• Wireline
• Cyber Security
• Network Operations
• Policy
• Software
• CSRIC VII: Rollover New In CSRIC VII