ISO 27001 · A.8 Technological

A.8.8 Management of technical vulnerabilities

Obtain information about technical vulnerabilities, evaluate exposure and take appropriate remediation measures.

Mapped across 10 provisions

Equivalent and related requirements in other frameworks and regulations.

CIS Controls v8EquivalentOfficial mapping
Source: CIS Controls v8 / ISO/IEC 27001
7.1 Establish and maintain a vulnerability management process
Gestion des vulnérabilités
NIST 800-53EquivalentOfficial mapping
Source: NIST SP 800-53 Rev. 5 / ISO/IEC 27001
RA-5 Vulnerability monitoring and scanning
Gestion des vulnérabilités
Cyber EssentialsEquivalentCurated
CE-5 Security update management
Gestion des vulnérabilités
Essential EightEquivalentCurated
E8-1 Patch applications
Gestion des vulnérabilités
Essential EightEquivalentCurated
E8-2 Patch operating systems
Gestion des vulnérabilités
GLBAPartialCurated
§314.4(d) Regularly test or monitor safeguards
Gestion des vulnérabilités
NIST 800-171EquivalentCurated
3.11.2 Scan for vulnerabilities
Gestion des vulnérabilités
NIST CSF 2.0EquivalentCurated
ID.RA-01 Vulnerabilities identified and recorded
Gestion des vulnérabilités
PCI DSSEquivalentCurated
Req. 11 Test security of systems and networks regularly
Gestion des vulnérabilités
SOC 2EquivalentCurated
CC7.1 Vulnerability detection and monitoring
Gestion des vulnérabilités