IS-11:VM-08
Vendors disclose vulnerabilities within 24h (the software composition analysis half of this control is tracked as VM-08-SCA)
Collectors
| Collector | Relationship | Samples | What it observes |
|---|---|---|---|
| No collector references this control yet. | |||
Evidence satisfying this control
| Collected | Collector | Result | Source | Digest |
|---|---|---|---|---|
| No artifact satisfies this control. | ||||
Definition history
| Changed | Field | From | To | Source |
|---|---|---|---|---|
| 2026-09-10 03:32 | description | Vendors disclose vulnerabilities within 24h; SCA tracks thi… | Vendors disclose vulnerabilities within 24h (the software c… | sync_controls |
A cadence change re-judges this control's existing evidence against the new interval, so its status can move the moment the change lands. That is why the change is recorded rather than just applied.