Control Summary Information

SI-2 Flaw Remediation (L) (M) (H)

1. 
   Identifies, reports, and corrects information system flaws;
   
2. 
   Tests software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation;
   
3. 
   Installs security-relevant software and firmware updates within [FedRAMP Assignment: thirty 30 days of release of updates] of the release of the updates; and
   
4. 
   Incorporates flaw remediation into the organizational configuration management process.
   

SI-2 (1) Control Enhancement (H)

The organization centrally manages the flaw remediation process.

SI-2 (1)	Control Summary Information
Responsible Role:
Implementation Status (check all that apply): ☐ Implemented ☐ Partially implemented ☐ Planned ☐ Alternative implementation ☐ Not applicable
Control Origination (check all that apply): ☐ Service Provider Corporate ☐ Service Provider System Specific ☐ Service Provider Hybrid (Corporate and System Specific) ☐ Configured by Customer (Customer System Specific) ☐ Provided by Customer (Customer System Specific) ☐ Shared (Service Provider and Customer Responsibility) ☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,

SI-2 (1) What is the solution and how is it implemented?

Download 1.2 Mb.

Share with your friends: