Navigate

SI-6(2)

SI-6(2): Automation Support for Distributed Testing

Implement automated mechanisms to support the management of distributed security and privacy function testing.

Supplemental

The use of automated mechanisms to support the management of distributed function testing helps to ensure the integrity, timeliness, completeness, and efficacy of such testing.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-6(2).

Control	Description
SI-2	a: Identify, report, and correct system flaws; b: Test software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation; c: Install security-relevant software and firmware updates within [time period within which to install security-relevant software updates after the release of the updates is defined;] of the release of the updates; and d: Incorporate flaw remediation into the organizational configuration management process.

Control

Description

SI-2

a: Identify, report, and correct system flaws;

b: Test software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation;

c: Install security-relevant software and firmware updates within [time period within which to install security-relevant software updates after the release of the updates is defined;] of the release of the updates; and

d: Incorporate flaw remediation into the organizational configuration management process.

Enhancements

The controls below (if any) add on to the requirements of SI-6(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-6(2).

CCI	Definition
CCI-001295	Implement automated mechanisms to support the management of distributed security function testing.
CCI-004993	Implement automated mechanisms to support the management of distributed privacy function testing.