RV: Respond to Vulnerabilities

Organizations should identify residual vulnerabilities in their software releases and respond appropriately to address those vulnerabilities and prevent similar ones from occurring in the future.

Practices

• RV.1: Identify and Confirm Vulnerabilities on an Ongoing Basis
• RV.2: Assess, Prioritize, and Remediate Vulnerabilities
• RV.3: Analyze Vulnerabilities to Identify Their Root Causes