Date:
Wednesday, April 20, 2022 - 16:15
Effective: April 1, 2022
The vulnerability scanning requirement for all network connected managed devices to be scanned has been rescinded for another six months while Information Security works to release the new solution that offers this service as required in the standard.
Please review the details of the exception and its compensating controls as well as the standards to which this exception applies.