18.3: Verify That Acquired Software is Still Supported
CSF v1.1 References:
PF v1.0 References:
The next version of the control set incorporates all or part of this control into: 16.4: Establish and Manage an Inventory of Third-Party Software Components.
Control Statement
Verify that the version of all software acquired from outside your organization is still supported by the developer or appropriately hardened based on developer security recommendations.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]