Navigate

• Top
• Description
• MAD
• Related

CCI-001230

CCI-001230 Definition

Incorporate flaw remediation into the organizational configuration management process.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001230.

Control

Description

SI-2

The organization: a: Identifies, reports, and corrects information system flaws; b: Tests software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation; c: Installs security-relevant software and firmware updates within [one of ] of the release of the updates; and d: Incorporates flaw remediation into the organizational configuration management process.