SI-2—Flaw Remediation

Identify, report, and correct system flaws;

Test software and firmware updates related to flaw remediation for effectiveness and potential side effects before installation;

Install security-relevant software and firmware updates within ⚙organization-defined time period of the release of the updates; and

Incorporate flaw remediation into the organizational configuration management process.