03.14.01 Flaw remediation
Identifying, reporting and correcting system flaws and installing security-relevant software and firmware updates within defined times of their release.
03.14 System and information integrity
Rev. 3 system and information integrity requirements: flaw remediation and patching, malicious code protection, security alerts and advisories, system monitoring, and management and retention of CUI.
03.14.02 Malicious code protection
Malware protection at system entry and exit points: detection and eradication, updates, scheduled and real-time scanning, and blocking or quarantining detections. Rev. 3 folded Rev. 2's 3.14.4 into it and treats 3.14.5 as addressed by it.
03.14.03 Security alerts, advisories, and directives
Receiving security alerts, advisories and directives from external organizations on an ongoing basis, and generating and sharing internal alerts as needed.
03.14.06 System monitoring
Monitoring the system to detect attacks, indicators of potential attacks, unauthorized connections and unauthorized use, including inbound and outbound traffic. Rev. 3 folded Rev. 2's 3.14.7 into it.
03.14.08 Information management and retention
Managing and retaining CUI in the system, and CUI output from it, in line with applicable laws, policies, standards and operational requirements; new in Rev. 3.
