FBI CJIS Security Policy SI-2(2): Flaw Remediation | Automated Flaw Remediation Status

What does SI-2(2) require?

Determine with vulnerability scanning tools at least monthly, and after any security incident involving CJI or the systems that handle it, whether components have the applicable security-relevant updates installed.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in SI: System and Information Integrity – FBI CJIS Security Policy

SI-1 SI-1 Policy and Procedures
SI-10 SI-10 Information Input Validation
SI-11 SI-11 Error Handling
SI-12 SI-12 Information Management and Retention
SI-12(1) SI-12(1) Information Management and Retention | Limit Personally Identifiable Information Elements
SI-12(2) SI-12(2) Information Management and Retention | Minimize Personally Identifiable Information in Testing, Training, and Research
SI-12(3) SI-12(3) Information Management and Retention | Information Disposal
SI-16 SI-16 Memory Protection

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All FBI CJIS Security Policy controls