History

Priority

should

2017

Security vulnerabilities in operating systems, applications, drivers and hardware devicesassessed as high risk must be patched or mitigated within two weeks of the securityvulnerability being identified by vendors, independent 3rd parties, system owners or users.

Control Text Changed. No public explaination.

2015

Vulnerabilities in operating systems, applications, drivers and hardware devices assessed asbelow extreme risk must be patched or mitigated as soon as possible.

2010

Agencies should apply all security patches as soon as possible.