SI-6(2)

SI-6(2): Automation Support for Distributed Testing

The information system implements automated mechanisms to support the management of distributed security testing.

Overlays
None

CSF Categories
None

The controls below (if any) were marked by NIST as being related to SI-6(2).

Control	Description
SI-2	The organization: a: Identifies, reports, and corrects information system flaws; b: Tests software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation; c: Installs security-relevant software and firmware updates within [organization-defined time period] of the release of the updates; and d: Incorporates flaw remediation into the organizational configuration management process.

Control

Description

b: Tests software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation;

c: Installs security-relevant software and firmware updates within [organization-defined time period] of the release of the updates; and

d: Incorporates flaw remediation into the organizational configuration management process.

The controls below (if any) add on to the requirements of SI-6(2).

Control	Description
No controls

The CCIs below are tied to SI-6(2).

CCI	Definition
CCI-001295	Implement automated mechanisms to support the management of distributed security function testing.