DeftTrust
sign in

Control calendar

Cadence comes from policy — it is what an auditor measures. How often a collector samples is a separate thing, shown on the Collectors page.

Status All Overdue No evidence Current Event-driven
Policy All IT-05 8 IT-03 1 IT-02 8 IS-02 9 IT-04 8 IS-11 10 IS-07 8 LEG-01 8
ControlStatusCadenceLastNext due TSCDescription
IS-11:VM-04 Event-driven Per scan — — CC7.2 CVSS-based risk scoring and P0–P5 prioritisation applied to all findings
IS-11:VM-05 Event-driven Event-driven — — CC7.2 P0: patch within 24h if available; workaround within 48h if not
IS-11:VM-08 Event-driven Continuous — — CC7.1 Vendors disclose vulnerabilities within 24h (the software composition ana…

3 controls shown.