Vulnerability scans are consistently run on schedule and results are reviewed and acted upon
This process control runs vulnerability scans on their planned schedule and assigns findings for action, a documented recurring procedure A.5.37 expects for this operational task.
The process facet runs scans on schedule and assigns every relevant finding to someone for action, turning scan output into tracked work.