💼 SI-2(5) Flaw Remediation | Automatic Software and Firmware Updates

• Contextual name: 💼 SI-2(5) Flaw Remediation | Automatic Software and Firmware Updates
• ID: /frameworks/nist-sp-800-53-r5/si/02/05
• Located in: 💼 SI-2 Flaw Remediation

Description

Install [Assignment: organization-defined security-relevant software and firmware updates] automatically to [Assignment: organization-defined system components].

Similar

• Sections
  • /frameworks/aws-fsbp-v1.0.0/dms/06
  • /frameworks/aws-fsbp-v1.0.0/ecs/10
  • /frameworks/aws-fsbp-v1.0.0/eks/02
  • /frameworks/aws-fsbp-v1.0.0/elastic-beanstalk/02
  • /frameworks/aws-fsbp-v1.0.0/elasticache/02
  • /frameworks/aws-fsbp-v1.0.0/lambda/02
  • /frameworks/aws-fsbp-v1.0.0/opensearch/10
  • /frameworks/aws-fsbp-v1.0.0/rds/13
  • /frameworks/aws-fsbp-v1.0.0/rds/35
  • /frameworks/aws-fsbp-v1.0.0/redshift/06
  • /frameworks/aws-fsbp-v1.0.0/ssm/02
• Internal
  • ID: dec-c-bdca1d22

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [DMS.6] DMS replication instances should have automatic minor version upgrade enabled		1	1
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [ECS.10] ECS Fargate services should run on the latest Fargate platform version
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [EKS.2] EKS clusters should run on a supported Kubernetes version
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [ElasticBeanstalk.2] Elastic Beanstalk managed platform updates should be enabled
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [ElastiCache.2] ElastiCache clusters should have automatic minor version upgrades enabled
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Lambda.2] Lambda functions should use supported runtimes
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Opensearch.10] OpenSearch domains should have the latest software update installed
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [RDS.13] RDS automatic minor version upgrades should be enabled		1	1
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [RDS.35] RDS DB clusters should have automatic minor version upgrade enabled
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Redshift.6] Amazon Redshift should have automatic upgrades to major versions enabled
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [SSM.2] Amazon EC2 instances managed by Systems Manager should have a patch compliance status of COMPLIANT after a patch installation

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (2)

Policy	Logic Count	Flags
📝 AWS DMS Replication Instance Auto Minor Version Upgrade is not enabled 🟢	1	🟢 x6
📝 AWS RDS Instance Auto Minor Version Upgrade is not enabled 🟠🟢	1	🟠 x1, 🟢 x6

Internal Rules

Rule	Policies	Flags
✉️ dec-x-0d66ed99	1
✉️ dec-x-215302da	1