CIS Controls v8 · Control 7: Continuous Vulnerability Management
7.1 Establish and maintain a vulnerability management process
Establish and maintain a documented vulnerability management process for enterprise assets.
Mapped across 10 provisions
Equivalent and related requirements in other frameworks and regulations.
- ISO 27001EquivalentOfficial mapping
Source: CIS Controls v8 / ISO/IEC 27001
A.8.8 Management of technical vulnerabilitiesGestion des vulnérabilités
- NIST CSF 2.0EquivalentOfficial mapping
Source: CIS Controls v8 / NIST CSF 2.0
ID.RA-01 Vulnerabilities identified and recordedGestion des vulnérabilités
- Cyber EssentialsEquivalentCuratedCE-5 Security update management
Gestion des vulnérabilités
- Essential EightEquivalentCuratedE8-1 Patch applications
Gestion des vulnérabilités
- Essential EightEquivalentCuratedE8-2 Patch operating systems
Gestion des vulnérabilités
- GLBAPartialCurated§314.4(d) Regularly test or monitor safeguards
Gestion des vulnérabilités
- NIST 800-171EquivalentCurated3.11.2 Scan for vulnerabilities
Gestion des vulnérabilités
- NIST 800-53EquivalentCuratedRA-5 Vulnerability monitoring and scanning
Gestion des vulnérabilités
- PCI DSSEquivalentCuratedReq. 11 Test security of systems and networks regularly
Gestion des vulnérabilités
- SOC 2EquivalentCuratedCC7.1 Vulnerability detection and monitoring
Gestion des vulnérabilités