← Back to Storage Area Network Security Technical Implementation Guide

V-6613

CAT II (Medium)

All security related patches are not installed.

Rule ID

SV-6733r1_rule

STIG

Storage Area Network Security Technical Implementation Guide

Version

V2R5

CCIs

None

Discussion

Failure to install security related patches leaves the SAN open to attack by exploiting known vulnerabilities. The IAO/NSO will ensure that all security-related patches are installed.

Check Content

The reviewer will, with the assistance of the IAO/NSO, verify that all security related patches are installed.

Fix Text

After verifying that the patches do not adversely impact the production SAN, create a plan for installing the patches on the SAN, obtain CM approval of the plan, and implement the plan installing the patches.