diff --git a/backend/cosmetology-app/requirements.in b/backend/cosmetology-app/requirements.in
index 3070d4af2..8b027949d 100644
--- a/backend/cosmetology-app/requirements.in
+++ b/backend/cosmetology-app/requirements.in
@@ -1,6 +1,6 @@
 aws-cdk-lib>=2.250.0
 aws-cdk-aws-lambda-python-alpha>=2.257.0a0
 constructs>=10.6.0,<11.0.0
-cdk-nag>=2.37.55,<3
+cdk-nag>=3.0.1,<4
 # pyyaml required for compact configuration uploader
 pyyaml>=6.0.2, <7
diff --git a/backend/cosmetology-app/requirements.txt b/backend/cosmetology-app/requirements.txt
index f07014ef2..ec5be89ea 100644
--- a/backend/cosmetology-app/requirements.txt
+++ b/backend/cosmetology-app/requirements.txt
@@ -23,7 +23,7 @@ aws-cdk-lib==2.260.0
     #   cdk-nag
 cattrs==26.1.0
     # via jsii
-cdk-nag==2.38.2
+cdk-nag==3.0.1
     # via -r requirements.in
 constructs==10.6.0
     # via
@@ -62,7 +62,6 @@ typeguard==2.13.3
     #   aws-cdk-asset-node-proxy-agent-v6
     #   aws-cdk-aws-lambda-python-alpha
     #   aws-cdk-lib
-    #   cdk-nag
     #   constructs
     #   jsii
 typing-extensions==4.15.0