+SI-02(06) Removal of Previous Versions of Software and Firmware

SI-02(06) Removal of Previous Versions of Software and Firmware

Control

Remove previous versions of [Assignement: software and firmware components] after updated versions have been installed.

Discussion

Previous versions of software or firmware components that are not removed from the system after updates have been installed may be exploited by adversaries. Some products may automatically remove previous versions of software and firmware from the system.

Assessment Objective

previous versions of [Assignement: software and firmware components] are removed after updated versions have been installed.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing flaw remediation mechanisms supporting flaw remediation system design documentation system configuration settings and associated documentation records of software and firmware component removals after updated versions are installed system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities organizational personnel installing, configuring, and/or maintaining the system organizational personnel responsible for flaw remediation

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
is blocked by SI-02(06) Removal of Previous Versions of Software and Firmware – Assessment Procedure
is blocked by Removal of Previous Versions