💼 ID.RA-1: Asset vulnerabilities are identified and documented

• Contextual name: 💼 ID.RA-1: Asset vulnerabilities are identified and documented
• ID: /frameworks/nist-csf-v1.1/id-ra/01
• Located in: 💼 Risk Assessment (ID.RA)

Description

Empty...

Similar

• Sections
  • /frameworks/iso-iec-27001-2013/12/06/01
  • /frameworks/iso-iec-27001-2013/18/02/03
  • /frameworks/nist-sp-800-53-r4/ca/02
  • /frameworks/nist-sp-800-53-r4/ca/07
  • /frameworks/nist-sp-800-53-r4/ca/08
  • /frameworks/nist-sp-800-53-r4/ra/03
  • /frameworks/nist-sp-800-53-r4/ra/05
  • /frameworks/nist-sp-800-53-r4/sa/05
  • /frameworks/nist-sp-800-53-r4/sa/11
  • /frameworks/nist-sp-800-53-r4/si/02
  • /frameworks/nist-sp-800-53-r4/si/04
  • /frameworks/nist-sp-800-53-r4/si/05
• Internal
  • ID: dec-c-8a09c1ef

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 ISO/IEC 27001:2013 → 💼 A.12.6.1 Management of technical vulnerabilities		7	7
💼 ISO/IEC 27001:2013 → 💼 A.18.2.3 Technical compliance review
💼 NIST SP 800-53 Revision 4 → 💼 CA-2 SECURITY ASSESSMENTS	3
💼 NIST SP 800-53 Revision 4 → 💼 CA-7 CONTINUOUS MONITORING	3
💼 NIST SP 800-53 Revision 4 → 💼 CA-8 PENETRATION TESTING	2
💼 NIST SP 800-53 Revision 4 → 💼 RA-3 RISK ASSESSMENT
💼 NIST SP 800-53 Revision 4 → 💼 RA-5 VULNERABILITY SCANNING	10
💼 NIST SP 800-53 Revision 4 → 💼 SA-5 INFORMATION SYSTEM DOCUMENTATION	5
💼 NIST SP 800-53 Revision 4 → 💼 SA-11 DEVELOPER SECURITY TESTING AND EVALUATION	8
💼 NIST SP 800-53 Revision 4 → 💼 SI-2 FLAW REMEDIATION	6	1	1
💼 NIST SP 800-53 Revision 4 → 💼 SI-4 INFORMATION SYSTEM MONITORING	24
💼 NIST SP 800-53 Revision 4 → 💼 SI-5 SECURITY ALERTS, ADVISORIES, AND DIRECTIVES	1

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 NIST CSF v2.0 → 💼 ID.RA-01: Vulnerabilities in assets are identified, validated, and recorded			22

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (15)

Policy	Logic Count	Flags
📝 AWS Account Multi-Region CloudTrail is not enabled 🟢	1	🟢 x6
📝 AWS CloudTrail Log File Validation is not enabled 🟢	1	🟢 x6
📝 AWS RDS Instance Auto Minor Version Upgrade is not enabled 🟠🟢	1	🟠 x1, 🟢 x6
📝 Azure PostgreSQL Flexible Server connection_throttle.enable Parameter is not set to ON 🟢	1	🟢 x6
📝 Azure SQL Server Auditing is not enabled 🟢	1	🟢 x6
📝 Azure SQL Server Auditing Retention is less than 90 days 🟢	1	🟢 x6
📝 Azure Storage Blob Logging is not enabled for Read, Write, and Delete requests 🟢	1	🟢 x6
📝 Azure Storage Queue Logging is not enabled for Read, Write, and Delete requests 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For (Managed Instance) Azure SQL Databases is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For App Services is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Containers is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Key Vault is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Servers is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For SQL Servers On Machines is not set to On 🟢	1	🟢 x6
📝 Azure Subscription Microsoft Defender For Storage is not set to On 🟢	1	🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-1a2f6279	1
✉️ dec-x-9f7d853f	1
✉️ dec-x-36ced3d1	1
✉️ dec-x-52ac4ac0	1
✉️ dec-x-89d5ed7a	1
✉️ dec-x-611eaa35	1
✉️ dec-x-850beea8	1
✉️ dec-x-8535d1ff	1
✉️ dec-x-a00b4ec9	1
✉️ dec-x-a0471977	1
✉️ dec-x-b1e1a494	1
✉️ dec-x-db1b7a1b	1
✉️ dec-x-fafadacd	1
✉️ dec-z-3f480eb5	1