18.3: Verify That Acquired Software is Still Supported

CSF v1.1 References:

PF v1.0 References:

Group:

Info icon.

The next version of the control set incorporates all or part of this control into: 16.4: Establish and Manage an Inventory of Third-Party Software Components.

Control Statement

Verify that the version of all software acquired from outside your organization is still supported by the developer or appropriately hardened based on developer security recommendations.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]