[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-csf\u002Fpr-ip":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-csf","pr-ip","PR.IP-12","Information Protection Processes and Procedures (CSF 1.1)",253,"US National Institute of Standards and Technology (NIST)","**What it asks for.** In CSF 1.1 this Protect category covered security policies, processes and procedures such as configuration baselines, secure development life cycles, change control, backups, response and recovery plans, and vulnerability management planning. CSF 2.0 removed it and distributed its subcategories across PR.PS, PR.DS, ID.IM, GV.PO and others. PR.IP-12 dealt with developing and implementing a vulnerability management plan.\n\n**In practice.** The organisation documents and follows processes for baselines, change control, backups, data destruction and personnel security, and maintains tested response and recovery plans. A vulnerability management plan defines scanning, prioritisation, remediation timelines and exceptions. Evidence includes procedures, change records, plan tests and vulnerability metrics.\n\n**Common gaps.** Processes are often documented but not followed, and plans are not tested. Vulnerability management plans may lack clear remediation timelines or an exception process.",null,"https:\u002F\u002Fwww.nist.gov\u002Fcyberframework","Open the Cybersecurity Framework at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"path-traversal-flaw-in-thermo-fisher-torrent-suite-exposes-sensitive-files","Path Traversal Flaw in Thermo Fisher Torrent Suite Exposes Sensitive Files","2026-10-15T18:21:22.798+00:00",{"slug":23,"title":24,"published_at":25},"unpatched-backup-platform-exploited-for-cryptomining-and-webshells","Unpatched Backup Platform Exploited for Cryptomining and Webshells","2026-10-09T18:20:23.376+00:00",{"slug":27,"title":28,"published_at":29},"anthropic-launches-ai-powered-critical-infrastructure-open-source-security-program","Anthropic Launches AI-Powered Critical Infrastructure & Open Source Security Program","2026-10-08T22:20:51.641+00:00",{"slug":31,"title":32,"published_at":33},"unpatched-lmcache-flaw-enables-unauthenticated-remote-code-execution","Unpatched LMCache Flaw Enables Unauthenticated Remote Code Execution","2026-10-07T18:21:31.402+00:00",{"slug":35,"title":36,"published_at":37},"qilin-ransomware-operator-arrested-lessons-from-a-global-extortion-campaign","Qilin Ransomware Operator Arrested: Lessons from a Global Extortion Campaign","2026-10-07T14:20:38.216+00:00",{"slug":39,"title":40,"published_at":41},"unpatched-oracle-peoplesoft-system-enables-shinyhunters-breach-via-fbi-contractor","Unpatched Oracle PeopleSoft System Enables ShinyHunters Breach via FBI Contractor","2026-10-06T18:20:56.804+00:00",{"slug":43,"title":44,"published_at":45},"unpatched-oracle-peoplesoft-flaw-lets-shinyhunters-breach-fbi-job-portal","Unpatched Oracle PeopleSoft Flaw Lets ShinyHunters Breach FBI Job Portal","2026-10-06T08:21:12.733+00:00",{"slug":47,"title":48,"published_at":49},"critical-flaws-in-privileged-access-manager-highlight-pam-security-risks","Critical Flaws in Privileged Access Manager Highlight PAM Security Risks","2026-10-03T12:20:58.495+00:00",{"slug":51,"title":52,"published_at":53},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-analysis-tool-1790878891453","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Analysis Tool","2026-10-01T18:21:31.21+00:00",{"slug":55,"title":56,"published_at":57},"critical-wordpress-plugin-flaws-demand-immediate-patching","Critical WordPress Plugin Flaws Demand Immediate Patching","2026-10-01T06:21:08.364+00:00",{"slug":59,"title":60,"published_at":61},"unauthenticated-command-injection-in-zimbra-mail-servers-enables-web-shell-deployment","Unauthenticated Command Injection in Zimbra Mail Servers Enables Web Shell Deployment","2026-09-30T17:20:58.368+00:00",{"slug":63,"title":64,"published_at":65},"critical-pre-auth-rce-in-mikrotik-routeros-demands-immediate-patching","Critical Pre-Auth RCE in MikroTik RouterOS Demands Immediate Patching","2026-09-30T16:20:23.964+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",182,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",149,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",63,{"slug":83,"name":84,"problem":85,"stories":86},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",44,{"slug":88,"name":89,"problem":90,"stories":91},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",36,{"slug":93,"name":94,"problem":95,"stories":96},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",28,[98,104,110,115,121,125,130,136],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","7","Control 7","Continuous Vulnerability Management",208,{"family":105,"item":106,"code":107,"title":108,"together":109},"nist-800-53","si-2","SI-2","Flaw Remediation",99,{"family":99,"item":111,"code":112,"title":113,"together":114},"12","Control 12","Network Infrastructure Management",92,{"family":116,"item":117,"code":118,"title":119,"together":120},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",85,{"family":122,"item":123,"code":124,"title":124,"together":81},"itil","overview","ITIL",{"family":99,"item":126,"code":127,"title":128,"together":129},"2","Control 2","Inventory and Control of Software Assets",58,{"family":131,"item":132,"code":133,"title":134,"together":135},"gdpr","32","Article 32","Security of processing",50,{"family":99,"item":137,"code":138,"title":139,"together":140},"4","Control 4","Secure Configuration of Enterprise Assets and Software",42]