Which CIS Control recommends organizations perform operating system updates on enterprise assets through automated patch management on a monthly, or more frequent basis?

$1.$

CIS$-01$: Inventory and Control of Enterprise Assets

$2.$

CIS$-02$: Inventory and Control of Software Assets

$3.$

CIS$-05$: Secure Configuration of Enterprise Assets and Software

$4.$

CIS$-07$: Continuous Vulnerability Management