SQL databases should have vulnerability findings resolved

NIST SP 800-53 Rev 5

• RA-5 Vulnerability Monitoring and Scanning
• SI-2 Flaw Remediation

NIST Cybersecurity Framework v2.0

• ID.AM-08

NIST SP 800-171 Rev 2

• 3.11.2 Scan for vulnerabilities in organizational systems and applications periodically and when new vulnerabilities affecting those systems and applications are identified
• 3.11.3 Remediate vulnerabilities in accordance with risk assessments
• 3.14.1 Identify, report, and correct system flaws in a timely manner

RBI IT Framework for NBFCs

• 1 IT Governance
• 3.3 Vulnerability Management

FedRAMP High

• RA-5 Vulnerability Scanning
• SI-2 Flaw Remediation

HIPAA HITRUST v9.2

• 0709.10m1Organizational.1-10.m 10.06 Technical Vulnerability Management
• 0716.10m3Organizational.1-10.m 10.06 Technical Vulnerability Management

PCI DSS v3.2.1

• 6.6 For public-facing web applications, ensure that either one of the requirements are in place
• 11.2.1: Perform quarterly internal vulnerability scans and rescans as needed, until all "high-risk" vulnerabilities (as identified in Requirement 6.1) are resolved. Scans must be performed by qualified personnel.
• Ensure that all system components and software are protected from known vulnerabilities by installing applicable vendor- supplied security patches
• For a sample of system components including all operating system types commonly affected by malicious software, verify that anti-virus software is deployed if applicable anti-virus technology exists