+APP.6.A9 Taking Inventory of Software (S)

APP.6.A9 Taking Inventory of Software (S)

Software SHOULD be inventoried. An inventory SHOULD document the systems on which software is used and under which licence. If necessary, the security-relevant settings SHOULD also be documented. Software SHOULD only be used with licences that correspond to the intended use and the respective contractual provisions. Each licence SHOULD cover the entire intended period of use of the corresponding software.

If there is a deviation from a default configuration, this SHOULD be documented. The inventory SHOULD be updated by the IT Operation Department as necessary, especially when software is installed.

The inventory SHOULD be structured to provide a quick overview of the necessary details in the event of a security incident.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.18 Poor Planning or Lack of Adaptation