03.14.03 Security Alerts, Advisories, and Directives

Statement

• a. Receive system security alerts, advisories, and directives from external organizations on an ongoing basis.

• b. Generate and disseminate internal system security alerts, advisories, and directives, as necessary.

Guidance

There are many publicly available sources of system security alerts and advisories. The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI) generate security alerts and advisories to maintain situational awareness across the Federal Government and in nonfederal organizations. Software vendors, subscription services, and industry Information Sharing and Analysis Centers (ISACs) may also provide security alerts and advisories. Compliance with security directives is essential due to the critical nature of many of these directives and the potential immediate adverse effects on organizational operations and assets, individuals, other organizations, and the Nation should the directives not be implemented in a timely manner.

Assessment objective

system security alerts, advisories, and directives from external organizations are received on an ongoing basis.

Assessment objective

internal security alerts, advisories, and directives are generated, as necessary.

Assessment objective

internal security alerts, advisories, and directives are disseminated, as necessary.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final