IS-11:VM-03
Bi-weekly automated web application scanning vs OWASP Top 10, CI/CD integrated
Collectors
| Collector | Relationship | Samples | What it observes |
|---|---|---|---|
| scans.external | supports | monthly | Monthly unauthenticated scan of everything we expose to the internet |
Supporting evidence only. The collectors above produce material relevant to this
control without discharging it, so the control stays overdue. Related evidence must never
make a control read as current — the gap would then be invisible.
Evidence satisfying this control
| Collected | Collector | Result | Source | Digest |
|---|---|---|---|---|
| No artifact satisfies this control. | ||||