Patch Non-Critical Vulnerabilities within 90 Days

Description

Ensure non-critical exploitable vulnerabilities are patched within 90 days

Dashboard Inclusion

We use the column has_patchNonCriticalVulns90Days_policy from the table projects to calculate the status, this column is populated using the bulk importer. More information

Details

• Default Category: vulnerability management
• Default Priority Group: P5
• Implementation Details: It is manual (details).
• C-SCRM: false
• Sources: Google Project Zero Vulnerability Disclosure Policy