N
|
controlSI-2

Flaw Remediation (SI-2)

Identify, report, and correct system flaws; Test software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation; Install security-relevant software and firmware updates within [organization-defined] of the release of the updates; and Incorporate flaw remediation into the organizational configuration management process.

Security Baselines

LOWMODERATEHIGH
integritymalwareflaw-remediationmonitoring

Why These Connect

Maps To9

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports25

These related controls work together — a change to one may affect the others.

Mitigates5

This control helps defend against or reduce the risk of the linked threat technique.

Enhances7

These enhancements add specific capabilities or refinements to the base control.

Related Controls(15)

CA-5Plan of Action and Milestones (CA-5)
LMH
CM-3Configuration Change Control (CM-3)
MH
CM-4Impact Analyses (CM-4)
LMH
CM-5Access Restrictions for Change (CM-5)
LMH
CM-6Configuration Settings (CM-6)
LMH
CM-8System Component Inventory (CM-8)
LMH
MA-2Controlled Maintenance (MA-2)
LMH
RA-5Vulnerability Monitoring and Scanning (RA-5)
LMH
SA-10Developer Configuration Management (SA-10)
MH
SA-11Developer Testing and Evaluation (SA-11)
MH
SA-8Security and Privacy Engineering Principles (SA-8)
LMH
SI-3Malicious Code Protection (SI-3)
LMH
SI-5Security Alerts, Advisories, and Directives (SI-5)
LMH
SI-7Software, Firmware, and Information Integrity (SI-7)
MH
SI-11Error Handling (SI-11)
MH

Threat Coverage(5 ATT&CK techniques)

T1190Exploit Public-Facing ApplicationT1203Exploitation for Client ExecutionT1505Server Software ComponentT1068Exploitation for Privilege EscalationT1588Obtain Capabilities

Cross-Framework Mappings(9)

ID.IM-01ID.IM-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.IM-02ID.IM-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.IM-03ID.IM-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.PS-02PR.PS-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ISO 27001ISO/IEC 27001:20223 mappingsFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
ID.IM-01ID.IM-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.IM-02ID.IM-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.IM-03ID.IM-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
PR.PS-02PR.PS-02Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

Control Enhancements(7)

SI-2(1)Central Management (SI-2(1))W
SI-2(2)Automated Flaw Remediation Status (SI-2(2))
MH
SI-2(3)Time to Remediate Flaws and Benchmarks for Corrective Actions (SI-2(3))
SI-2(4)Automated Patch Management Tools (SI-2(4))
SI-2(5)Automatic Software and Firmware Updates (SI-2(5))
SI-2(6)Removal of Previous Versions of Software and Firmware (SI-2(6))
SI-2(7)Root Cause Analysis (SI-2(7))

See Also

@SP 800-53 Overview⚖Compare Baselines