Anthropic-Cybersecurity-Skills/skills/implementing-rapid7-insightvm-for-scanning/references/standards.md

Standards and References - Rapid7 InsightVM

Official Documentation

• InsightVM Product Page: https://www.rapid7.com/products/insightvm/
• InsightVM Quick Start Guide: https://docs.rapid7.com/insightvm/insightvm-quick-start-guide/
• InsightVM System Requirements: https://docs.rapid7.com/insightvm/system-requirements/
• InsightVM API v3 Documentation: https://help.rapid7.com/insightvm/en-us/api/index.html
• Insight Agent Documentation: https://docs.rapid7.com/insightvm/using-the-insight-agent-with-insightvm/

Scan Configuration References

• Scan Templates: https://docs.rapid7.com/insightvm/selecting-vulnerability-checks/
• Credential Configuration: https://docs.rapid7.com/insightvm/configuring-scan-credentials/
• Scan Scheduling: https://docs.rapid7.com/insightvm/configuring-scan-schedules/

Industry Standards

• NIST SP 800-115: Technical Guide to Information Security Testing and Assessment
• NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning
• PCI DSS v4.0 Req 11.3: External and internal vulnerability scanning
• CIS Controls v8.1 Control 7: Continuous Vulnerability Management
• ISO 27001:2022 A.8.8: Management of technical vulnerabilities

Compliance Scan Templates

Standard	InsightVM Template	Frequency
PCI DSS	PCI ASV External Audit	Quarterly
HIPAA	HIPAA Compliance	Quarterly
CIS Benchmarks	CIS Policy Compliance	Monthly
DISA STIG	DISA STIG Compliance	Monthly
NIST 800-53	Full Audit Enhanced	Quarterly