id: "MA-03(06)" title: "Software Updates and Patches" family: "MA" family_name: "Maintenance" sort_id: "ma-03.06" priority: "P2" implementation_level: "system" parent: "MA-03" enhancement: True
Statement
Inspect maintenance tools to ensure the latest software updates and patches are installed.
Guidance
Maintenance tools using outdated and/or unpatched software can provide a threat vector for adversaries and result in a significant vulnerability for organizations.
Assessment Objective
maintenance tools are inspected to ensure that the latest software updates and patches are installed.
Maintenance policy
procedures addressing system maintenance tools
system maintenance tools and associated documentation
list of personnel authorized to use maintenance tools
maintenance tool usage records
maintenance records
system security plan
other relevant documents or records
Organizational personnel with system maintenance responsibilities
organizational personnel with information security responsibilities
Organizational processes for inspecting maintenance tools
organizational processes for maintenance tools updates
mechanisms supporting and/or implementing the inspection of maintenance tools
mechanisms supporting and/or implementing maintenance tool updates.