800-53|SI-3(2)

Title

AUTOMATIC UPDATES

Description

The information system automatically updates malicious code protection mechanisms.

Supplemental

Malicious code protection mechanisms include, for example, signature definitions. Due to information system integrity and availability concerns, organizations give careful consideration to the methodology used to carry out automatic updates.

Reference Item Details

Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations

Related: SI-8

Category: SYSTEM AND INFORMATION INTEGRITY

Parent Title: MALICIOUS CODE PROTECTION

Family: SYSTEM AND INFORMATION INTEGRITY

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
4.1 Ensure 'Antivirus Update Schedule' is set to download and install updates hourly	Palo_Alto	CIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
4.2 Ensure 'Applications and Threats Update Schedule' is set to download and install updates daily	Palo_Alto	CIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
5.7 Ensure 'WildFire Update Schedule' is set to download and install updates every 15 minutes	Palo_Alto	CIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
WatchGuard : Gateway AntiVirus - 'Enabled'	WatchGuard	TNS Best Practice WatchGuard Audit 1.0.0
WatchGuard : IPS Signature Update - 'Enabled'	WatchGuard	TNS Best Practice WatchGuard Audit 1.0.0

Detections

Analytics