CSCv7|3.4

Title

Deploy Automated Operating System Patch Management Tools

Description

Deploy automated software update tools in order to ensure that the operating systems are running the most recent security updates provided by the software vendor.

Reference Item Details

Category: Continuous Vulnerability Management

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 (L1) Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.4.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 13.0 Ventura v1.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 14.0 Sonoma v1.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v2.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 13.0 Ventura Cloud-tailored v1.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v3.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 13.0 Ventura v2.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v1.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 10.15 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 11.0 Big Sur v3.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 11.0 Big Sur v4.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 11 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 10.15 Catalina v3.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey Cloud-tailored v1.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v1.0.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 14.0 Sonoma Cloud-tailored v1.0.0 L1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.7 v1.1.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.1.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.2.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.7 v1.2.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.3.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.5 v1.0.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.7 v1.3.0 Level 1
1.1 Install Updates, Patches and Additional Security SoftwareUnixCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0
1.1 Use the Latest Package UpdatesUnixCIS Oracle Solaris 11.4 L1 v1.1.0
1.1 Use the Latest Package UpdatesUnixCIS Oracle Solaris 11.4 L1 v1.0.0
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.15 v2.0.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 11 v2.0.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.14 v1.3.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.14 v1.4.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.15 v1.3.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.15 v1.4.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 11 v1.1.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 11 v1.2.0 L1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 10.15 v1.4.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 10.14 v1.4.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 10.15 v1.3.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 11 v1.2.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 10.14 v1.3.0 L1
1.2 Enable Auto UpdateUnixCIS Apple macOS 11 v1.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.15 v2.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 12.0 Monterey v2.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 12.0 Monterey v3.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 14.0 Sonoma Cloud-tailored v1.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 12.0 Monterey v2.1.0 L1
1.10 Ensure updates, patches, and additional security software are installedUnixCIS Debian Family Workstation L1 v1.0.0
1.10 Ensure updates, patches, and additional security software are installedUnixCIS Debian Family Server L1 v1.0.0