CCI-002640

Incorporate the results from malicious code analysis into organizational flaw remediation processes.

Implementation Guidance

The organization being inspected/assessed incorporates the results from malicious code analysis into organizational flaw remediation processes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the flaw remediation processes to ensure the organization being inspected/assessed incorporates the results from malicious code analysis into organizational flaw remediation processes.

Compelling Evidence

1.) Signed and dated system security plan. 2.) Flaw remediation processes incorporate the results from malicious code analysis into organizational flaw remediation processes.

The controls below (if any) were marked by NIST as being related to CCI-002640.