The company formally requires regular scanning of all systems to identify known security vulnerabilities
Sekit's Vulnerability scanning policy, one of A.5.1's topic-specific policies, requires every server, workstation and externally reachable service to be scanned for known vulnerabilities on a defined schedule.
This policy facet requires every server, workstation and externally reachable service to be scanned on a defined schedule, matching A.8.8's core scanning requirement.