Back

Configure Patch Management settings in accordance with organizational standards.


CONTROL ID
08519
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain system hardening procedures., CC ID: 12001

This Control has the following implementation support Control(s):
  • Configure "Select when Preview Builds and Feature Updates are received" to organizational standards., CC ID: 15399
  • Configure "Select when Quality Updates are received" to organizational standards., CC ID: 15355
  • Configure the "Check for missing Windows Updates" to organizational standards., CC ID: 08520


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Ensure package manager repositories are configured Description: Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If a system's package repositories are misconfigured important patches may not be identified or a rogue repos… (1.2.2, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 1)
  • Ensure package manager repositories are configured Description: Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If a system's package repositories are misconfigured important patches may not be identified or a rogue repos… (1.2.2, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 2)
  • Ensure Auto Minor Version Upgrade feature is Enabled for RDS Instances (Automated) Description: Ensure that RDS database instances have the Auto Minor Version Upgrade flag enabled in order to receive automatically minor engine upgrades during the specified maintenance window. So, RDS instances can … (2.3.2, CIS Amazon Web Services Foundations Benchmark Level 1, v3.0.0)
  • Ensure Auto Minor Version Upgrade feature is Enabled for RDS Instances (Automated) Description: Ensure that RDS database instances have the Auto Minor Version Upgrade flag enabled in order to receive automatically minor engine upgrades during the specified maintenance window. So, RDS instances can … (2.3.2, CIS Amazon Web Services Foundations Benchmark, Combined Levels, v3.0.0)
  • Ensure package manager repositories are configured Description: Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If a system's package repositories are misconfigured important patches may not be identified or a rogue repos… (1.2.3, CIS Oracle Linux 8 Benchmark, Server Level 1, v1.0.1)
  • Ensure package manager repositories are configured Description: Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If a system's package repositories are misconfigured important patches may not be identified or a rogue repos… (1.2.3, CIS Oracle Linux 8 Benchmark, Server Level 2, v1.0.1)