id: "SI-02(02)" title: "Automated Flaw Remediation Status" family: "SI" family_name: "System and Information Integrity" sort_id: "si-02.02" priority: "P1" implementation_level: "organization" parent: "SI-02" enhancement: True
Statement
Determine if system components have applicable security-relevant software and firmware updates installed using {{ insert: param, si-02.02_odp.01 }} {{ insert: param, si-02.02_odp.02 }}.
Guidance
Automated mechanisms can track and determine the status of known flaws for system components.
Assessment Objective
system components have applicable security-relevant software and firmware updates installed {{ insert: param, si-02.02_odp.02 }} using {{ insert: param, si-02.02_odp.01 }}.
System and information integrity policy
system and information integrity procedures
procedures addressing flaw remediation
automated mechanisms supporting centralized management of flaw remediation
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
organizational personnel installing, configuring, and/or maintaining the system
organizational personnel responsible for flaw remediation
Automated mechanisms used to determine the state of system components with regard to flaw remediation