---
name: framework-financial-services-controls-si-2.2
title: SI-2 (2) -  Automated Flaw Remediation Status
description: 'Determine if system components have applicable security-relevant software and firmware updates installed using _[Assignment: organization-defined automated mechanisms]_ _[IBM Assignment: at least monthly]_.'
last-updated: 2026-08-26
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/framework-financial-services-controls?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# SI-2 (2) -  Automated Flaw Remediation Status
{: #si-2.2}

## Control requirements
{: #control-requirements}



### SI-2 (2) - 0
{: #si-2-2-0}


Determine if system components have applicable security-relevant software and firmware updates installed using _[Assignment: organization-defined automated mechanisms]_ _[IBM Assignment: at least monthly]_.












## NIST supplemental guidance
{: #nist-supplemental-guidance}

Automated mechanisms can track and determine the status of known flaws for system components.