2-15 System and Information Integrity System and information integrity guidelines are as follows: Identify, report, and correct information and system flaws in a timely manner. Implement a patch management program to ensure that security patches, hot fixes, and updated are implemented in a timely manner commensurate with the risk. Provide protection from malicious code at appropriate locations within organizational systems. Monitor system security alerts and advisories and take appropriate actions in response. Update malicious code protection mechanisms when new releases are available. Perform periodic scans of organizational systems and real-time scans of files from external sources as files are downloaded, opened, or executed. Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks. Identify unauthorized use of organizational systems.