Citadel / Controls / SystemUpdated

SystemUpdated Control

What does this control check?

The SystemUpdated control verifies that your operating system has all the latest security updates and patches installed. Keeping your system up to date is one of the most important steps you can take to protect your device.

Why is this important?

🛡️

Security Patches

Software updates fix known security vulnerabilities that attackers actively exploit. Running outdated software leaves you exposed to these well-documented threats.

🔒

Data Protection

Security vulnerabilities in outdated systems can allow attackers to steal your data, passwords, and personal information. Updates close these security holes.

✨

New Features

Updates often include improvements to existing security features, better performance, and new protections against emerging threats.

How to fix this

Installing Windows Updates

  1. Click the Start button and select Settings (gear icon)
  2. Click Windows Update (or Update & Security on older versions)
  3. Click Check for updates
  4. If updates are available, click Download or Download and install
  5. Wait for the updates to download and install (this may take some time)
  6. Click Restart now if prompted
⚠️ Important notes:
  • Save all your work before starting the update process
  • Keep your computer plugged in during updates
  • Some updates require multiple restarts - this is normal
  • Do not turn off your computer while updates are installing
  • You may need to check for updates multiple times until no more are available

Installing macOS Updates

  1. Click the Apple menu in the top-left corner
  2. Select System Settings (or System Preferences on older versions)
  3. Click General and then Software Update
  4. Wait while your Mac checks for available updates
  5. If updates are available, click Update Now or Upgrade Now
  6. Enter your password if prompted
  7. Wait for the updates to download and install
  8. Click Restart when prompted
⚠️ Important notes:
  • Save all your work before starting the update process
  • Keep your Mac plugged in during updates
  • Major macOS upgrades can take 30-60 minutes or longer
  • Do not close your laptop lid while updates are installing
  • If using FileVault, make sure you know your encryption password

Installing updates on Linux

Run your distribution's package manager update, then reboot if a new kernel was installed.

Debian / Ubuntu:

sudo apt update && sudo apt upgrade
sudo reboot   # if prompted, or if a new kernel was installed

Fedora / RHEL / CentOS:

sudo dnf upgrade
sudo reboot   # if a new kernel package was installed
⚠️ Important notes:
  • A pending reboot is flagged either by /var/run/reboot-required (Debian/Ubuntu) or by a kernel package installed more recently than your last boot (RPM-based distros)
  • Installing updates without rebooting leaves the old, vulnerable kernel or libraries running

Verifying the fix

After installing updates and restarting, Citadel will automatically verify this control during its next check.

To check if updates are complete:

  1. Open Settings → Windows Update
  2. Click Check for updates
  3. It should show "You're up to date" or list only optional updates
  4. Look for "Last checked" to confirm recent update check

Note: If you see "Restart required" or "Restart pending", you must restart your computer to complete the updates.

To check if updates are complete:

  1. Open System Settings → General → Software Update
  2. It should show "Your Mac is up to date"
  3. The page will display when your Mac last checked for updates

Note: If you see "Updates available" or "Restart to finish installing", you need to complete those steps first.

To check if updates are complete:

# Debian / Ubuntu
test -e /var/run/reboot-required && echo "reboot needed" || echo "no reboot needed"

# Fedora / RHEL / CentOS
rpm -q --last kernel | head -1   # compare against: uptime -s