03.14.02 - Flaw Remediation

The si_l_02 entry in NIST SP 800-171 Rev 3 mandates that organizations promptly detect, assess, and remediate software flaws that could affect Controlled Unclassified Information, applying patches or mitigations within defined timeframes, verifying their effectiveness, and recording the remediation activities for accountability.