---

id: "SI-02(04)" title: "Automated Patch Management Tools" family: "SI" family_name: "System and Information Integrity" sort_id: "si-02.04" priority: "P1" implementation_level: "system" parent: "SI-02" enhancement: True

---

Statement

Employ automated patch management tools to facilitate flaw remediation to the following system components: {{ insert: param, si-02.04_odp }}.

Guidance

Using automated tools to support patch management helps to ensure the timeliness and completeness of system patching operations.

Assessment Objective

automated patch management tools are employed to facilitate flaw remediation to {{ insert: param, si-02.04_odp }}.

System and information integrity policy

system and information integrity procedures

procedures addressing flaw remediation

mechanisms supporting flaw remediation and automatic software/firmware updates

system design documentation

system configuration settings and associated documentation

list of system flaws

records of recent security-relevant software and firmware updates that are automatically installed to system components

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for flaw remediation

Automated patch management tools

mechanisms implementing automatic software/firmware updates

mechanisms facilitating flaw remediation to system components