Baseline Nonbank Cybersecurity Exam Program

Question 45

If so, how is it deployed, updated, and managed?

15

Question 46

What is the institution's process for applying security patches to organizational assets? Are patch status reports generated and independently reviewed to validate the effectiveness of the patch management program? Are automated systems used to identify and patch systems?

16