ASSOCIATED DRATA CONTROL
This test is part of the Security Patches Automatically Applied control that ensures all company-issued computer and workstation operating systems are configured to apply security patches automatically, if using the Drata Agent. If using one of the MDM connections, the test ensures all company-issued computers and workstations are compliant with the mapped security patches policy.
WHAT TO DO IF A TEST FAILS
If Drata is finds computers or workstations that 1) are not automatically applying security patches or 2) aren't compliant with the mapped security patches policy, the test will fail. With a failed test you will receive a list of computers/workstations that do not have automatic updates configured or are not compliant with the mapped automatic updates policy.
To remediate a failed test, you will need to advise the owners of these computers/workstations to properly configure their operating systems to apply security patches automatically or to be compliant with the mapped device policy.
STEPS TO REMEDIATE
If you are using the Drata Agent, ensure that the user has installed the Drata Agent and that the Agent is currently running on their system.
If you are using one of the MDM connections, ensure that:
The automatic updates policy exists
The automatic updates policy maps to the user’s device
The user’s device is compliant with the automatic updates policy
Alternatively:
Navigate to the Personnel page
Select a Personnel and click to open the detail drawer
Upload evidence that the personnel has enabled auto updates for security patches