What to Provide
(1) If an automated patching tool/configurations are utilized, provide evidence to demonstrate that these configurations are in place on production VMs/servers/containers.
(2) Evidence demonstrating the Operating System (OS) version that is utilized on production VMs/servers/containers.
Evidence Format
Screenshots or exported images in a common image file type, such as .jpg, .png, or .pdf.
Additional Guidance
(1) The evidence should demonstrate:
The production systems that are being patched
The frequency of the patching that's taking place
(2) The evidence should demonstrate:
The OS version being used
The associated VM/server/container name/ID (unique identifier) associated to the OS screenshot
Associated Unified Control ID | Associated Framework Control |
CTRL-652 | LCL-43 |