CCI-004955

Determine if system components have applicable security-related software updates installed using organization-defined mechanisms on an organization-defined frequency.