NIST 800-53 · RA — Risk Assessment

RA-5 Vulnerability monitoring and scanning

Monitor and scan for vulnerabilities and remediate them in line with risk.

Mapped across 10 provisions

Equivalent and related requirements in other frameworks and regulations.

ISO 27001EquivalentOfficial mapping
Source: NIST SP 800-53 Rev. 5 / ISO/IEC 27001
A.8.8 Management of technical vulnerabilities
Vulnerability management
NIST CSF 2.0EquivalentOfficial mapping
Source: NIST CSF 2.0 / SP 800-53 Rev. 5
ID.RA-01 Vulnerabilities identified and recorded
Vulnerability management
CIS Controls v8EquivalentCurated
7.1 Establish and maintain a vulnerability management process
Vulnerability management
Cyber EssentialsEquivalentCurated
CE-5 Security update management
Vulnerability management
Essential EightEquivalentCurated
E8-1 Patch applications
Vulnerability management
Essential EightEquivalentCurated
E8-2 Patch operating systems
Vulnerability management
GLBAPartialCurated
§314.4(d) Regularly test or monitor safeguards
Vulnerability management
NIST 800-171EquivalentCurated
3.11.2 Scan for vulnerabilities
Vulnerability management
PCI DSSEquivalentCurated
Req. 11 Test security of systems and networks regularly
Vulnerability management
SOC 2EquivalentCurated
CC7.1 Vulnerability detection and monitoring
Vulnerability management