SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Vulnerability & Configuration

21 controles en 7 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0226Baseline compliancesin mapeos aúnThe company formally measures compliance of all systems against approved security configuration baselinesRCF-0223Configuration managementsin mapeos aúnSecurity configuration standards are formally defined and required for all system typesRCF-0232Exposure managementsin mapeos aúnThe company formally identifies and manages its external attack surface to reduce the risk of exploitationRCF-0229Patch prioritizationsin mapeos aúnThe company formally prioritises patches based on vulnerability severity, asset criticality and exploitation likelihoodRCF-0235Penetration testingsin mapeos aúnThe company formally commissions periodic penetration tests to identify exploitable weaknessesRCF-0220Vulnerability remediation SLAssin mapeos aúnThe company formally defines how quickly vulnerabilities must be remediated based on their severityRCF-0217Vulnerability scanningsin mapeos aúnThe company formally requires regular scanning of all systems to identify known security vulnerabilities

Proceso

RCF-0227Baseline compliancesin mapeos aúnBaseline compliance is consistently monitored and non-compliant systems are remediated within agreed timelinesRCF-0224Configuration managementsin mapeos aúnSystem configurations are consistently reviewed against approved standards and deviations are correctedRCF-0233Exposure managementsin mapeos aúnExternal-facing assets are consistently inventoried and exposure is reduced where it is not business-justifiedRCF-0230Patch prioritizationsin mapeos aúnPatch prioritisation decisions are consistently applied and documented when deviating from the standard scheduleRCF-0236Penetration testingsin mapeos aúnPenetration tests are consistently scoped, conducted and findings are tracked to remediationRCF-0221Vulnerability remediation SLAssin mapeos aúnVulnerability remediation deadlines are consistently tracked and escalated when at risk of being missedRCF-0218Vulnerability scanningsin mapeos aúnVulnerability scans are consistently run on schedule and results are reviewed and acted upon

Técnica

RCF-0228Baseline compliancesin mapeos aúnTechnical tools report baseline compliance rates across the infrastructure and track remediation progressRCF-0225Configuration managementsin mapeos aúnTechnical tools continuously assess system configurations and automatically remediate or alert on deviationsRCF-0234Exposure managementsin mapeos aúnTechnical tools continuously monitor the external attack surface and alert on newly exposed or vulnerable assetsRCF-0231Patch prioritizationsin mapeos aúnTechnical tools integrate vulnerability severity and threat intelligence to automate patch prioritisationRCF-0237Penetration testingsin mapeos aúnTechnical infrastructure supports controlled penetration testing without affecting production availabilityRCF-0222Vulnerability remediation SLAssin mapeos aúnTechnical tools track vulnerability age against defined SLAs and automatically escalate overdue itemsRCF-0219Vulnerability scanningsin mapeos aúnTechnical tools conduct automated vulnerability scans and feed results into the remediation tracking process
Pregúntale a Sekura: «¿Qué evidencia demuestra Vulnerability & Configuration?»
Conecta tu IA · MCP gratis
https://staging.sekit.ai/api/mcp/crosswalk
  1. En Claude o ChatGPT, añade un conector personalizado y pega esta URL.
  2. Inicia sesión con tu correo para terminar. Gratis, de solo lectura, sin necesidad de organización.