Mell, P.
, Bergeron, T.
and Henning, D.
(2005),
Creating a Patch and Vulnerability Management Program, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD
(Accessed November 21, 2024)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Creating a Patch and Vulnerability Management Program
Published
Author(s)
, Tiffany Bergeron, Dave Henning
Abstract
[Superseded by SP 800-40 Rev. 3 (July 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=913929] This document provides guidance on creating a security patch and vulnerability management program and testing the effectiveness of that program. The primary audience is security managers who are responsible for designing and implementing the program. However, this document also contains information useful to system administrators and operations personnel who are responsible for applying patches and deploying solutions (i.e., information related to testing patches and enterprise patching software). [Supersedes SP 800-40 (August 2002): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151264]Citation
Special Publication (NIST SP) - 800-40 Ver 2.0
Report Number
800-40 Ver 2.0
NIST Pub Series
Pub Type
NIST Pubs
Supercedes Publication
Superceded By Publication
Keywords
computer security, security patches, vulnerability management
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.
Created November 16, 2005, Updated May 4, 2021