---

id: "RA-05(06)" title: "Automated Trend Analyses" family: "RA" family_name: "Risk Assessment" sort_id: "ra-05.06" priority: "P1" implementation_level: "organization" parent: "RA-05" enhancement: True

---

Statement

Compare the results of multiple vulnerability scans using {{ insert: param, ra-05.06_odp }}.

Guidance

Using automated mechanisms to analyze multiple vulnerability scans over time can help determine trends in system vulnerabilities and identify patterns of attack.

Assessment Objective

the results of multiple vulnerability scans are compared using {{ insert: param, ra-05.06_odp }}.

Risk assessment policy

procedures addressing vulnerability scanning

system design documentation

vulnerability scanning tools and techniques documentation

vulnerability scanning results

system security plan

other relevant documents or records

Organizational personnel with vulnerability scanning responsibilities

organizational personnel with vulnerability scan analysis responsibilities

organizational personnel with security responsibilities

Organizational processes for vulnerability scanning

automated mechanisms/tools supporting and/or implementing vulnerability scanning

automated mechanisms supporting and/or implementing trend analysis of vulnerability scan results