SI — System and Information Integrity
12 objectives in the System and Information Integrity domain
SI.L1-B.1.XII[a]The time within which to identify system flaws is specified.
SI.L1-B.1.XII[b]System flaws are identified within the specified time frame.
SI.L1-B.1.XII[c]The time within which to report system flaws is specified.
SI.L1-B.1.XII[d]System flaws are reported within the specified time frame.
SI.L1-B.1.XII[e]The time within which to correct system flaws is specified.
SI.L1-B.1.XII[f]System flaws are corrected within the specified time frame.
SI.L1-B.1.XIII[a]Designated locations for malicious code protection are identified.
SI.L1-B.1.XIII[b]Protection from malicious code at designated locations is provided.
SI.L1-B.1.XIV[a]Malicious code protection mechanisms are updated when new releases are available.
SI.L1-B.1.XV[a]The frequency for malicious code scans is defined.
SI.L1-B.1.XV[b]Malicious code scans are performed with the defined frequency.
SI.L1-B.1.XV[c]Real-time malicious code scans of files from external sources as files are downloaded, opened, or executed are performed.