A review of identified vulnerabilities is performed to determine and address underlying causes.
The operational resilience management system supports and enables achievement of the specific goals of the Vulnerability Analysis and Resolution process area by transforming identifiable input work products to produce identifiable output work products.
Perform the specific practices of the Vulnerability Analysis and Resolution process area to develop work products and provide services to achieve the specific goals of the process area.
Vulnerability analysis and resolution is institutionalized as a managed process.
Establish and maintain governance over the planning and performance of the vulnerability analysis and resolution process.
Establish and maintain the plan for performing the vulnerability analysis and resolution process.
Provide adequate resources for performing the vulnerability analysis and resolution process, developing the work products, and providing the services of the process.
Assign responsibility and authority for performing the vulnerability analysis and resolution process, developing the work products, and providing the services of the process.
Train the people performing or supporting the vulnerability analysis and resolution process as needed.
Place designated work products of the vulnerability analysis and resolution process under appropriate levels of control.
Passcode