+APP.6.A9 Taking Inventory of Software (S)

APP.6.A9 Taking Inventory of Software (S)

Software SHOULD be inventoried. An inventory SHOULD document the systems on which software is used and under which licence. If necessary, the security-relevant settings SHOULD also be documented. Software SHOULD only be used with licences that correspond to the intended use and the respective contractual provisions. Each licence SHOULD cover the entire intended period of use of the corresponding software.

If there is a deviation from a default configuration, this SHOULD be documented. The inventory SHOULD be updated by the IT Operation Department as necessary, especially when software is installed.

The inventory SHOULD be structured to provide a quick overview of the necessary details in the event of a security incident.

1. Przegląd

Tytuł Norma

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania
Źródło Wymaganie

3. Powiązane regulacje

Regulacje
Źródło Regulacja

Powiązane zgłoszenia

Powiązania
Typ powiązania Zgłoszenie
blocks G 0.18 Poor Planning or Lack of Adaptation