OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/GLBA Safeguards Rule (16 CFR 314)/314.4

314.4(d)(2)(ii)

paragraph (action item)

Vulnerability assessments, including any systemic scans or reviews of information systems reasonably designed to identify publicly known security vulnerabilities in your information systems based on the risk assessment, at least every six months; and whenever there are material changes to your operations or business arrangements; and whenever there are circumstances you know or have reason to know may have a material impact on your information security program.

314.4 Elements.

Related Frameworks

1 mapping across 4 frameworks
SCF1 mapping
VPM-06Vulnerability Scanning
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (33) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00
PL-1Policy and Procedures
1.00
PM-10Authorization Process
1.00
RA-3Risk Assessment
1.00
RA-5Vulnerability Monitoring and Scanning
1.00
RA-5(11)Public Disclosure Program
1.00
RA-5(5)Privileged Access
1.00

+23 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.11.2
1.00
3.11.3
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.14.1
1.00
3.14.2
1.00
3.14.3
1.00

+2 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000245
1.00
CCI-000246
1.00
CCI-000247
1.00
CCI-000248
1.00
CCI-000251
1.00
CCI-000252
1.00
CCI-000253
1.00
CCI-000254
1.00
CCI-000274
1.00
CCI-000279
1.00

+90 more (top 10 by confidence shown)

Federal Trade Commission, Standards for Safeguarding Customer Information (GLBA Safeguards Rule). Edition dated 2026-01-01. Read the publication.