System and Information Integrity (03.14)

The System and Information Integrity (SI) control family requires organizations to identify, report, and remediate flaws in software and hardware, monitor for malicious code, and enforce timely updates and patches. It also mandates integrity verification of system components and protection against unauthorized changes to maintain the reliability and security of controlled unclassified information.