The system must support automated patch management tools to facilitate flaw remediation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-225435	WN12-GE-000024	SV-225435r569185_rule		Medium

Description
The organization (including any contractor to the organization) must promptly install security-relevant software updates (e.g., patches, service packs, hot fixes). Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed.

STIG	Date
Microsoft Windows Server 2012/2012 R2 Member Server Security Technical Implementation Guide	2022-03-01

Details

Check Text ( C-27134r471647_chk )
Verify the organization has an automated process to install security-related software updates. If it does not, this is a finding.

Fix Text (F-27122r471648_fix)
Establish a process to automatically install security-related software updates.