#iso27001/2013
### ISO 27001 A 12.6.1 Management of technical vulnerabilities
Information about technical vulnerabilities of information systems being used shall be obtained in a timely fashion, the organization’s exposure to such vulnerabilities evaluated and appropriate measures taken to address the associated risk.

Related:
- [ISO 27001 A 6.1.4 Contact with special interest groups](ISO%2027001%20A%206.1.4%20Contact%20with%20special%20interest%20groups.md) may be required to be alerted to vulnerabilities in a timely fashion
- [ISO 27001 A 16.1.1 Responsibilities and procedures](ISO%2027001%20A%2016.1.1%20Responsibilities%20and%20procedures.md) for incident management need to be implemented, to enable a quick and effective response to security incidents.
