2.2—Ensure Authorized Software is Currently Supported
IG1
IG2
IG3
Software
Identify
>Control Description
Ensure that only currently supported software is designated as authorized in the software inventory for enterprise assets. If software is unsupported, yet necessary for the fulfillment of the enterprise’s mission, document an exception detailing mitigating controls and residual risk acceptance. For any unsupported software without an exception documentation, designate as unauthorized. Review the software list to verify software support at least monthly, or more frequently.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.