BaselineWatch
Desk

SI-02(05) Automatic Software and Firmware Updates

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI part of SI-2

Title

Automatic Software and Firmware Updates

Control

Install [Assignment: security-relevant software and firmware updates] automatically to [Assignment: system components].

Discussion

Due to system integrity and availability concerns, organizations consider the methodology used to carry out automatic updates. Organizations balance the need to ensure that the updates are installed as soon as possible with the need to maintain configuration management and control with any mission or operational impacts that automatic updates might impose.

Parameters

si-02.05_odp.01: security-relevant software and firmware updates
si-02.05_odp.02: system components

Assessment objective

SI-02(05) [Assignment: security-relevant software and firmware updates] are installed automatically to [Assignment: system components].

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).