CCI-001233
The organization employs automated mechanisms on an organization-defined frequency to determine the state of information system components with regard to flaw remediation.
Flaw remediation Tanium applications must employ automated mechanisms to determine the state of information system components with regard to flaw remediation using the following frequency: continuously, where HBSS is used; 30 days, for any additional internal network scans not covered by HBSS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
2 rules found Severity: Medium

The Tanium application must employ automated mechanisms to determine the state of information system components with regard to flaw remediation using the following frequency: Continuously, where ESS is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
1 rule found Severity: Medium

1 rule found Severity: Medium

1 rule found Severity: Medium

The macOS system must use an Endpoint Security Solution (ESS) and implement all DOD required modules.
1 rule found Severity: Medium

Windows Server 2016 must employ automated mechanisms to determine the state of system components with regard to flaw remediation using the following frequency: continuously, where Endpoint Security Solution (ESS) is used; 30 days, for any additional internal network scans not covered by ESS; and annually, for external scans by Computer Network Defense Service Provider (CNDSP).
1 rule found Severity: Medium
