SI-3(2): Automatic Updates

Control Family:

System And Information Integrity

Parent Control:

SI-3: Malicious Code Protection

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

DE.CM-4
DE.DP-3

Baselines:

Moderate
High

Control is withdrawn in the next version of this control set and incorporated into: SI-3: Malicious Code Protection.

Control Statement

The information system automatically updates malicious code protection mechanisms.

Supplemental Guidance

Malicious code protection mechanisms include, for example, signature definitions. Due to information system integrity and availability concerns, organizations give careful consideration to the methodology used to carry out automatic updates.