SI-2(4): Automated Patch Management Tools

Control Family:

System and Information Integrity

Parent Control:

SI-2: Flaw Remediation

CSF v1.1 References:

ID.RA-1
PR.IP-12

Threats Addressed:

Tampering
Elevation of Privilege
Lateral Movement

Baselines:

(Not part of any baseline)

Control is new to this version of the control set.

Control Statement

Employ automated patch management tools to facilitate flaw remediation to the following system components: [Assignment: organization-defined system components].

Supplemental Guidance

Using automated tools to support patch management helps to ensure the timeliness and completeness of system patching operations.