Version History

What are the expectations for entities when assigning risk rankings to vulnerabilities and resolving or addressing those vulnerabilities?