| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1549 - Vulnerability Scanning | ||
| Id | d6976a08-d969-4df2-bb38-29556c2eb48a | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Risk Assessment control | ||
| Additional metadata |
Name/Id: ACF1549 / Microsoft Managed Control 1549 Category: Risk Assessment Title: Vulnerability Scanning - Response Time to Remediate Vulnerabilities Ownership: Customer, Microsoft Description: The organization: Remediates legitimate vulnerabilities High Risk: within 30 days, Moderate Risk: within 90 days in accordance with an organizational assessment of risk; and Requirements: Vulnerabilities are classified by risk and applicability to the environment with all vulnerabilities identified by C+AI VSA required to be remediated within thirty (30) days for high, ninety (90) days for moderate, and one hundred and eighty (180) days for low risk vulnerabilities. In addition, all verified security flaws are managed and tracked via the POA&M process. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|