SFS 0 / SF 1

Back to SFS 0

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are all organization-owned workstations kept up to date with security patches during the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Workstations have received all applicable security patches within vendor-recommended timeframes

Assessment criterion and evidence

Actor: Organization. Scope: All organization-owned workstations including local, diskless, and remote desktop environments. Evidence period: The defined review period specified in the assessment scope. Required evidence: Patch management system logs showing deployment status; Vulnerability scan reports covering the review period. Negative criterion: Workstations missing critical security updates for known vulnerabilities. Missing evidence: Pending assessment when patch management logs are unavailable

View the JSON record (opens in a new tab).

Assessment result: unset.