diff --git a/backend/social-work-app/requirements.in b/backend/social-work-app/requirements.in
index 4b0223a02..d34d536a4 100644
--- a/backend/social-work-app/requirements.in
+++ b/backend/social-work-app/requirements.in
@@ -1,6 +1,6 @@
 aws-cdk-lib>=2.256.1
 aws-cdk-aws-lambda-python-alpha>=2.265.0a0
 constructs>=10.8.1,<11.0.0
-cdk-nag>=2.37.55,<3
+cdk-nag>=3.0.2,<4
 # pyyaml required for compact configuration uploader
 pyyaml>=6.0.2, <7
diff --git a/backend/social-work-app/requirements.txt b/backend/social-work-app/requirements.txt
index a73c1f483..97058b806 100644
--- a/backend/social-work-app/requirements.txt
+++ b/backend/social-work-app/requirements.txt
@@ -23,7 +23,7 @@ aws-cdk-lib==2.266.0
     #   cdk-nag
 cattrs==26.1.0
     # via jsii
-cdk-nag==2.38.2
+cdk-nag==3.0.2
     # via -r requirements.in
 constructs==10.8.1
     # via
@@ -59,7 +59,6 @@ six==1.17.0
 typeguard==2.13.3
     # via
     #   aws-cdk-asset-node-proxy-agent-v6
-    #   cdk-nag
     #   jsii
 typing-extensions==4.15.0
     # via