This test is part of the Quarterly Vulnerability Scan control that ensures your company engages with a third-party to conduct vulnerability scans of the production environment as dictated by company policy and compliance requirements. This control also requires that scan results are reviewed by management with high-priority findings being tracked to resolution.

​

When a test fails, verify your vulnerability connection in Drata. When Drata is able to successfully validate that a vulnerability scanner is connected, the test will pass.
For more information, go to Vulnerability Scans 101.