2.6: Address unapproved software

Control Statement

Ensure that unauthorized software is either removed or the inventory is updated in a timely manner

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]