Date Published: November 2005
Withdrawn: July 22, 2013
Superseded By: SP 800-40 Rev. 3 (July 2013)
Supersedes: SP 800-40 (August 2002)
Author(s)
Peter Mell (NIST), Tiffany Bergeron (MITRE), David Henning (Hughes Network Systems)
This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program. The primary audience is security managers who are responsible for designing and implementing the program. However, this document also contains information useful to system administrators and operations personnel who are responsible for applying patches and deploying solutions (i.e., information related to testing patches and enterprise patching software).
This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program. The primary audience is security managers who are responsible for designing and implementing the program. However, this document also contains...
See full abstract
This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program. The primary audience is security managers who are responsible for designing and implementing the program. However, this document also contains information useful to system administrators and operations personnel who are responsible for applying patches and deploying solutions (i.e., information related to testing patches and enterprise patching software).
Hide full abstract
Keywords
computer security; security patches; vulnerability management
Control Families
Awareness and Training;
Configuration Management;
Planning;
Risk Assessment;