Back to all 93 controls
Annex A 8.8
Technological
A.8.8 Management of technical vulnerabilities
Manage technical vulnerabilities.
What good looks like
Asset-based vulnerability scanning, prioritised remediation SLAs, patch programme.
Evidence an auditor will ask for
Scan reports, remediation tickets, SLA dashboard.
Document template for this control
The Vulnerability Management Policy template gives you auditor-ready wording that fulfils Annex A 8.8. Preview the full document before you download the editable version.