Test and Development Zone A Security Technical Implementation Guide

The Test and Development Zone A Security Technical Implementation Guide (V1 R6) has 27 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

27STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R6

CurrentPublished Wed Apr 27 2022

Development systems must be part of a patch management solution and all systems must be up to date.

Test and Development Zone A Security Technical Implementation Guide

Assessment Title

Rule Text

Development systems must be part of a patch management solution and all systems must be up to date.

Description

Discussion Text

Major software vendors release security patches and hotfixes to their products when security vulnerabilities are discovered. It is essential that these updates be applied in a timely manner to prevent unauthorized individuals from exploiting identified vulnerabilities.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-39440

Rule

SV-51298r1_rule

Severity

high

Rule Version

ENTD0100

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine whether the organization has a patch management solution in place to apply security patches released by the vendor, and that all systems are up to date.  If a patch management solution has not been implemented and is not functioning to update development systems with the latest patches, or all systems are not up to date, this is a finding.

Implementation Procedure

Fix Text

Implement a patch management solution to keep development systems up to date with the latest security patches released by the vendor.

STIG check 10 of 27 in the Test and Development Zone A STIG checklist

← Previous · V-39439Development systems must have a firewall installed, configured, and enabled.Next · V-39441 →A change management policy must be implemented for application development.