AuditRubric
remediation

remediation Controls

6 controls across 3 frameworks.

CISA CPG

vm-1

Vulnerability scanning is performed regularly on all systems

Vulnerability Management / Vulnerability Management
vm-3

Critical and high vulnerabilities are remediated within defined SLAs

Vulnerability Management / Vulnerability Management

NIST CSF

de-cm-8

Vulnerability scans are performed

Detect / Continuous Monitoring
id-im-1

Improvements are identified from evaluations

Identify / Improvement
rs-mi-2

Incidents are eradicated

Respond / Incident Mitigation

SOC2

cc4-2

Control deficiencies are identified, evaluated, and communicated

Security / Monitoring Activities