2 docs tagged with "patching"

Organisational policy that defines the requirements for the creation, approval, semantic versioning, patching, deprecation and revocation of container base images approved by the organisation (Golden Base Images), including patching SLAs by criticality and management of the internal catalogue, proportional to the criticality level (L1, L2, L3).

Remediation prioritisation layer based on the probability of exploitation (EPSS, FIRST.org) and confirmed exploitation (CISA KEV), applied on top of the CVSS-based patching SLAs. EPSS and KEV refine the order of remediation; the SLAs by severity remain as the mandatory floor.