Back

Include risk information when communicating critical security updates.


CONTROL ID
14948
CONTROL TYPE
Communicate
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Install critical security updates and important security updates in a timely manner., CC ID: 01696

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The manufacturer should inform the user in a recognizable and apparent manner that a security update is required together with information on the risks mitigated by that update. (Provision 5.3-11, CYBER; Cyber Security for Consumer Internet of Things: Baseline Requirements, ETSI EN 303 645, V2.1.1)