FBI CJIS Security Policy SI-2: SI-2 Flaw Remediation

Identify, report and correct system flaws, test flaw-related software and firmware updates for effectiveness and side effects before installation, install security-relevant updates within 15 days of release for critical, 30 for high, 60 for medium and 90 for low severity, and incorporate flaw remediation into configuration management.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – FBI CJIS Security Policy

SI-1 SI-1 Policy and Procedures
SI-10 SI-10 Information Input Validation
SI-11 SI-11 Error Handling
SI-12 SI-12 Information Management and Retention
SI-12(1) SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements
SI-12(2) SI-12(2) Information Management and Retention | Minimize Personally Identifiable Information in Testing, Training, and Research
SI-12(3) SI-12(3) Information Management and Retention | Information Disposal
SI-16 SI-16 Memory Protection

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls