CSCv7|3.4

Title

Deploy Automated Operating System Patch Management Tools

Description

Deploy automated software update tools in order to ensure that the operating systems are running the most recent security updates provided by the software vendor.

Reference Item Details

Category: Continuous Vulnerability Management

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 10.15 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 11 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v1.1.0 L1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.7 v1.2.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.5 v1.0.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.1.0 Level 1
1.1 Use the Latest Package UpdatesUnixCIS Oracle Solaris 11.4 L1 v1.0.0
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.15 v2.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 11 v2.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 12.0 Monterey v1.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2.1 Configure Connection to the RHN RPM RepositoriesUnixCIS Red Hat Enterprise Linux 5 L1 v2.2.1
1.2.1 Ensure GPG keys are configuredUnixCIS Rocky Linux 8 Workstation L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Fedora 19 Family Linux Workstation L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS CentOS 7 v3.1.2 Server L1
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 7 Server L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise Workstation 12 L1 v3.1.0
1.2.1 Ensure GPG keys are configuredUnixCIS Amazon Linux 2 v2.0.0 L1
1.2.1 Ensure GPG keys are configuredUnixCIS CentOS 7 v3.1.2 Workstation L1
1.2.1 Ensure GPG keys are configuredUnixCIS AlmaLinux OS 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Fedora 28 Family Linux Workstation L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 7 Workstation L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat EL7 Workstation L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Fedora 28 Family Linux Server L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Rocky Linux 8 Server L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat EL7 Server L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise 15 Server L1 v1.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation
1.2.1 Ensure GPG keys are configuredUnixCIS Fedora 19 Family Linux Server L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise 15 Workstation L1 v1.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise Server 12 L1 v3.1.0
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Oracle Linux 6 Server L1 v2.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian 8 Workstation L1 v2.0.2
1.2.1 Ensure package manager repositories are configuredUnixCIS Red Hat 6 Server L1 v3.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian Family Workstation L1 v1.0.0
1.2.1 Ensure Red Hat Subscription Manager connection is configuredUnixCIS Red Hat EL8 Server L1 v2.0.0
1.2.1 Ensure Red Hat Subscription Manager connection is configuredUnixCIS Red Hat EL8 Workstation L1 v2.0.0
1.10 Ensure updates, patches, and additional security software are installedUnixCIS Debian Family Workstation L1 v1.0.0
1.10 Ensure updates, patches, and additional security software are installedUnixCIS Debian Family Server L1 v1.0.0