FedRAMP Controls / SI
SI-2(3) Time to Remediate Flaws and Benchmarks for Corrective Actions
Family SI
Baselines moderate
Mapped KSIs 0
Control statement
(a) Measure the time between flaw identification and flaw remediation; and
(b) Establish the following benchmarks for taking corrective actions: {{ insert: param, si-02.03_odp }}. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
No 20x Key Security Indicators map to this control in the current catalog version.