Work

CISA KEV patch-or-wait: use due dates, reachability evidence, and signed VEX

Year: 2026

Type: preprint

Abstract: Patch CISA KEV entries by the catalog due date. Start a 3-business-day reachability clock at KEV add to decide patch or defer with signed VEX evidence. Independent technical note mirroring the canonical version: https://tomoguides.com/blog/cisa-kev-patch-or-wait-use-due-dates-reachability-evidence-and-signed-vex.php

Source: Zenodo (CERN European Organization for Nuclear Research)

DOI: 10.5281/zenodo.24043578

Author: Ferguson, Blake

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W7225466333

Cites:

Cited by:

Related to: 10