Navigate

SI-3(2)

SI-3(2): Automatic Updates

The information system automatically updates malicious code protection mechanisms.

Supplemental

Malicious code protection mechanisms include, for example, signature definitions. Due to information system integrity and availability concerns, organizations give careful consideration to the methodology used to carry out automatic updates.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-3(2).

Control	Description
SI-8	The organization: a: Employs spam protection mechanisms at information system entry and exit points to detect and take action on unsolicited messages; and b: Updates spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures.

Enhancements

The controls below (if any) add on to the requirements of SI-3(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-3(2).

CCI	Definition
CCI-001247	The information system automatically updates malicious code protection mechanisms.