800-53|SI-2(2)

Title

AUTOMATED FLAW REMEDIATION STATUS

Description

The organization employs automated mechanisms [Assignment: organization-defined frequency] to determine the state of information system components with regard to flaw remediation.

Reference Item Details

Related: CM-6,SI-4

Category: SYSTEM AND INFORMATION INTEGRITY

Parent Title: FLAW REMEDIATION

Family: SYSTEM AND INFORMATION INTEGRITY

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 10.15 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 11 v2.1.0 L1
1.1 Ensure All Apple-provided Software Is CurrentUnixCIS Apple macOS 12.0 Monterey v1.1.0 L1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 6.7 v1.2.0 Level 1
1.1 Ensure ESXi is properly patchedVMwareCIS VMware ESXi 7.0 v1.1.0 Level 1
1.1 Verify all Apple-provided software is currentUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.15 v2.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 11 v2.1.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 10.14 v2.0.0 L1
1.2 Ensure Auto Update Is EnabledUnixCIS Apple macOS 12.0 Monterey v1.1.0 L1
1.2.1 Ensure GPG keys are configuredUnixCIS CentOS 7 v3.1.2 Workstation L1
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server
1.2.1 Ensure GPG keys are configuredUnixCIS Amazon Linux 2 v2.0.0 L1
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 7 Server L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS CentOS 7 v3.1.2 Server L1
1.2.1 Ensure GPG keys are configuredUnixCIS Rocky Linux 8 Workstation L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise Workstation 12 L1 v3.1.0
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise Server 12 L1 v3.1.0
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 7 Workstation L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat EL7 Server L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS AlmaLinux OS 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Rocky Linux 8 Server L1 v1.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Oracle Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS AlmaLinux OS 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation
1.2.1 Ensure GPG keys are configuredUnixCIS Red Hat EL7 Workstation L1 v3.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise 15 Server L1 v1.1.1
1.2.1 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise 15 Workstation L1 v1.1.1
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS Fedora 28 Family Linux Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configured - gpgkeyUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.2.1 Ensure GPG keys are configured - show rpm keysUnixCIS Fedora 28 Family Linux Workstation L1 v2.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian 8 Workstation L1 v2.0.2
1.2.1 Ensure package manager repositories are configuredUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian Linux 11 Workstation L1 v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian 8 Server L1 v2.0.2
1.2.1 Ensure package manager repositories are configuredUnixCIS Debian Linux 11 Server L1 v1.0.0
1.2.1 Ensure package manager repositories are configuredUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.1
1.2.2 Ensure GPG keys are configuredUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.15 Ensure 'Enable component updates in Google Chrome' is set to 'Enabled'WindowsCIS Google Chrome L1 v2.1.0
1.100 Ensure 'Notify a user that a browser restart is recommended or required for pending updates' is set to 'Enabled: Required - Show a recurring prompt to the user indicating that a restart is required'WindowsCIS Microsoft Edge L1 v1.1.0
1.102 Ensure 'Set disk cache size, in bytes' is set to 'Enabled: 250609664'WindowsCIS Microsoft Edge L1 v1.1.0
1.103 Ensure 'Set the time period for update notifications' is set to 'Enabled: 86400000'WindowsCIS Microsoft Edge L1 v1.1.0