Patch Management
Another important corrective control involves fixing known vulnerabilities and installing the latest updates to both security programs (e.g., antivirus and firewall software) and to operating systems and other applications programs. This is important because, as Figure 7-10 shows, the number of reported vulnerabilities rises each year.