public users of the information system, a description of the authorized uses of the information system. Failure to meet the requirements for vulnerability scanning listed below could put the organization in weaker security posture that could result in unauthorized disclosure of information, greater compromise of the system, or to other more severe security threats against the [Test: RA-5.1 - [Test: RA-5.1 - organization: Vulnerability Vulnerability Scanning] Scanning] (i) the organization defines the Vulnerability response times for remediating Not Entered [E-# OR Scanning [NIST Not Entered legitimate vulnerabilities in High W-#] 800-53 w/ DHS accordance with an [Test: RA-5.2 - 4300A RA-5] [Test: RA-5.2 - organizational assessment of Vulnerability Vulnerability risk; Scanning] Scanning] (ii) the organization remediates legitimate vulnerabilities in Not Entered Not Entered accordance with response times; and (iii) the organization shares information obtained from the vulnerability scanning process and security control assessments with designated personnel throughout the organization to help eliminate
public users of the information system, a description of the authorized uses of the information system. [E-# OR W-#] Vulnerability Scanning [NIST 800-53 w/ DHS 4300A RA-5] [Test: RA-5.1 - Vulnerability Scanning] Not Entered [Test: RA-5.2 - Vulnerability Scanning] Not Entered Failure to meet the requirements for vulnerability scanning listed below could put the organization in weaker security posture that could result in unauthorized disclosure of information, greater compromise of the system, or to other more severe security threats against the organization: (i) the organization defines the response times for remediating legitimate vulnerabilities in accordance with an organizational assessment of risk; (ii) the organization remediates legitimate vulnerabilities in accordance with response times; and (iii) the organization shares information obtained from the vulnerability scanning process and security control assessments with designated personnel throughout the organization to help eliminate High [Test: RA-5.1 - Vulnerability Scanning] Not Entered [Test: RA-5.2 - Vulnerability Scanning] Not Entered