OSCAL Parameters within RA-5: Vulnerability Monitoring and Scanning
response times to remediate legitimate vulnerabilities in accordance with an organizational assessment of risk are defined;