+SI-02(05) Automatic Software and Firmware Updates

SI-02(05) Automatic Software and Firmware Updates

Control

Install [Assignement: security-relevant software and firmware updates] automatically to [Assignement: system components].

Discussion

Due to system integrity and availability concerns, organizations consider the methodology used to carry out automatic updates. Organizations balance the need to ensure that the updates are installed as soon as possible with the need to maintain configuration management and control with any mission or operational impacts that automatic updates might impose (i.e., implementing a staggered deployment strategy).

Assessment Objective

[Assignement: security-relevant software and firmware updates] are installed automatically to [Assignement: system components].

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing flaw remediation mechanisms supporting flaw remediation and automatic software/firmware updates system design documentation system configuration settings and associated documentation records of recent security-relevant software and firmware updates automatically installed to system components system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system organizational personnel responsible for flaw remediation

1. Přehled

Název Standard

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky
Zdroj Požadavek

3. Související regulace

Regulace
Zdroj Regulace

Propojené úkoly