Clarifying vulnerability assessment scheduling in AEMaaCS

If you use Adobe Experience Manager as a Cloud Service (AEMaaCS), you wonder whether vulnerability assessments require submission through Adobe Cloud Manager or a non-disclosure form. This article confirms that neither is needed and explains that any production issues during assessments should be escalated via a P1 ticket.

Description description

Environment

Adobe Experience Manager as a Cloud Service (AEMaaCS) - Sites

Issue/Symptoms

  • You are unsure if the Penetration Tests section in Adobe Cloud Manager applies to vulnerability assessments.
  • You seek clarification on whether a non-disclosure form is required for vulnerability assessment activities.

Resolution resolution

To resolve this issue, follow these step:

  1. Vulnerability assessments don’t require submission through the Penetration Tests section or completion of a non-disclosure form.
  2. If any issues arise during production due to the assessment, raise a P1 ticket immediately for assistance.

Notes:  Non-disclosure forms apply only to penetration tests and are not required for vulnerability assessments.

recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f