History

Priority

recommended

Nov 2018

Removed

Removed due to a merge of relevant content into security control 0911.

2017

Agencies should have vulnerability assessments conducted by suitably skilled personnelindependent of the target of the assessment or by an independent third party.

2015

Agencies should have vulnerability assessments conducted by suitably skilled personnelindependent to the target of the assessment or by an independent third party.

2010

It is recommended agencies have vulnerability assessments conducted by personnel independent tothe target of the assessment or by an independent third party.