Patch operating systems

search account_circle

boltEssential 8

Patch operating systems

16 controls in this part of theASD Essential Eight. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Automated bi-weekly asset discovery for vulnerability scanning

Use an automated tool to find all system assets every two weeks for security checks.

Use a vulnerability scanner with an updated database

Ensure a vulnerability scanner with current data is used to check for security issues.

Use a daily vulnerability scanner for internet-facing systems

Use a tool every day to find and fix missing updates on servers and network devices facing the inter

Use a vulnerability scanner fortnightly to find missing OS patches

Use a vulnerability scanner every two weeks to check for missing OS updates on internal systems.

Apply critical patches to internet-facing OS within 48 hours

Apply critical updates to internet-facing systems within 48 hours to prevent exploitation.

Timely application of non-critical patches for internet-facing OS vulnerabilities

Apply non-critical patches to internet-facing systems within two weeks if no exploits exist.

Replace unsupported operating systems

Ensure that all outdated and unsupported operating systems are replaced with supported versions.

Vulnerability scanner used fortnightly to identify missing driver patches

Use a vulnerability scanner every two weeks to find missing driver updates.

At least fortnightly use of a vulnerability scanner for firmware

Use a vulnerability scanner every two weeks to find and update missing firmware patches.

Apply critical patches to non-internet-facing OS within 48 hours

Quickly install critical updates on internal systems to fix security vulnerabilities.

Non-critical OS patches applied within one month if no exploits exist

Apply OS patches on internal devices within a month if they aren't critical and have no known exploi

Apply critical driver patches within 48 hours

Ensure critical security updates for drivers are applied within 48 hours to prevent exploitation.

Apply non-critical driver patches within one month

Ensure drivers are updated within a month if the vulnerabilities are non-critical and no exploits ex

Apply critical firmware patches within 48 hours

Ensure firmware vulnerabilities are fixed quickly, within 48 hours if critical.

Firmware vulnerabilities patched within one month if non-critical and no exploits

Apply patches for non-critical firmware vulnerabilities within a month if no exploits exist.

The latest or previous OS release is used

Ensure your operating system is up-to-date with the latest or previous version.

Back to the full Essential Eight mitigation strategies control list, or browse the complete control library.