NIST SP 800-171 & CMMC 2.0 Control 3.11.3 Requirement:
Remediate vulnerabilities in accordance with risk assessments.
NIST SP 800-171 & CMMC 2.0 3.11.3 Requirement Explanation:
Not all vulnerabilities identified by a vulnerability scan pose the same level of risk. Prioritize mitigation efforts to close the most critical vulnerabilities first. Track all vulnerability remediation to ensure completion; also track vulnerabilities that you have determined not to remediate.
Example NIST SP 800-171 & CMMC 2.0 3.11.3 Implementation:
Remediate the vulnerabilities identified by your vulnerability scans. This often involves applying security updates and patches to your systems. Document the discovered vulnerabilities in a plan of action and milestones document so that you can track your progress towards mitigating them. Prioritize mitigation efforts to close the most critical vulnerabilities first.
NIST SP 800-171 & CMMC 2.0 3.11.3 Scenario(s):
- Scenario 1:
You performed a vulnerability scan of your network and identified several vulnerabilities. The vulnerability scanner automatically categorizes them based on their level of severity. You add these vulnerabilities to your plan of action and milestone POA&M document to track their status. You task IT staff to mitigate the vulnerabilities.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.