Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/System and Information Integrity/885 of 1011

SI-02Flaw Remediation

Control family: System and Information Integrity

Control description

a. Identify, report, and correct system flaws;

b. Test software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation;

c. Install security-relevant software and firmware updates within [Assignment: organization-defined time period] of the release of the updates; and

d. Incorporate flaw remediation into the organizational configuration management process.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.