# SI-3(4) — Updates Only by Privileged Users

- **Control ID:** SI-3(4)
- **Family:** [SI](/md/families/SI.md)
- **Baselines:** No content available.
- **Enhancement of:** [SI-3](/md/controls/SI-3.md)

## Description

Update malicious code protection mechanisms only when directed by a privileged user.

## Discussion

Protection mechanisms for malicious code are typically categorized as security-related software and, as such, are only updated by organizational personnel with appropriate access privileges.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [CM-5](/md/controls/CM-5.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.