Navigate

MA-3(6)

MA-3(6): Software Updates and Patches

Inspect maintenance tools to ensure the latest software updates and patches are installed.

Supplemental

Maintenance tools using outdated and/or unpatched software can provide a threat vector for adversaries and result in a significant vulnerability for organizations.

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
DAF Baseline

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to MA-3(6).

Control	Description
AC-3	Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
AC-6	Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish assigned organizational tasks.

Enhancements

The controls below (if any) add on to the requirements of MA-3(6).

Control	Description
No controls

Related CCIs

The CCIs below are tied to MA-3(6).

CCI	Definition
CCI-004189	Inspect the maintenance tools to ensure the latest software updates and patches are installed.