https://www.kaseya.com/blog/patch-management-policy/
In this blog, Kaseya will discuss patch management policy best practices and explain how they contribute to a better patching environment for large and small organizations alike.
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-147B.pdf
This NIST Special Publication is designed to provide guidelines for BIOS protections in server-class systems.
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-209.pdf
This NIST Special Publication is designed to provide a comprehensive set of security recommendations for the current landscape of the storage infrastructure.
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-40r4.pdf
This NIST Special Publication is designed to assist organizations in understanding the basics of enterprise patch management technologies.
NIST SP 800-53 Rev 5: MA–2 Controlled Maintenance
3.7 3.7.1 3.7.2 Maintenance
https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=MA-02
NIST resources that defines requirement for controlled maintenance.
https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=MA-03
NIST resources that defines requirements for review, assessment, and approval of system maintenance tools
NIST SP 800-53 Rev 5: MA–4 Nonlocal Maintenance
3.7 3.7.1 3.7.5 Maintenance
https://csrc.nist.gov/projects/cprt/catalog#/cprt/framework/version/SP_800_53_5_1_1/home?element=MA-04
NIST resources that define requirements for nonlocal system maintenance activities