Technical Vulnerability Management and Control of Malware Standard

The objective of the Technical Vulnerability Management and Control of Malware Standard is to set the minimum requirements for Technical Vulnerability Management and for Control of Malware.

Technical Vulnerability Management includes identifying, assessing and remediating the potential impact of technical vulnerabilities within the IT environment. The objective is to reduce risks resulting from exploitation of publicly known technical vulnerabilities to an acceptable level. Threats related to unmanaged technical vulnerabilities (e.g. unpatched systems on the network) include hacking, system misuse and infection or spread of malware (e.g. worms, trojans), which can put the security (availability, integrity and confidentiality) of all IT assets at risk.