Control: ism-1697; Revision: 0; Updated: Sep-21; Applicability: ALL; Essential Eight: N/A ​

Patches, updates or vendor mitigations for security vulnerabilities in drivers and firmware are applied within two weeks of release, or within 48 hours if an exploit exists.