RA-5.11: Public Disclosure Program

Risk assessment policy

procedures addressing vulnerability scanning

risk assessment

vulnerability scanning tools and techniques documentation

vulnerability scanning results

vulnerability management records

audit records

public reporting channel

system security plan

other relevant documents or records

Organizational personnel with vulnerability scanning responsibilities

organizational personnel with vulnerability scan analysis responsibilities

organizational personnel with security responsibilities

Organizational processes for vulnerability scanning

mechanisms/tools supporting and/or implementing vulnerability scanning

mechanisms implementing the public reporting of vulnerabilities