ComplianceCIS Safeguard v8.1

CIS-16.5 Use Up-to-Date and Trusted Third-Party Software Components

Official page ↗
Framework
CIS Controls v8.1
Control
CIS-16 Application Software Security
ATT&CK techniques mitigated
3

ATT&CK mappings (CTID)

• T1195 Supply Chain Compromise — Selecting and maintaining trusted software components helps prevent integration of malicious or compromised libraries, packages, and software. • T1195.001 Compromise Software Dependencies and Development Tools — Selecting and maintaining trusted software components helps prevent integration of malicious or compromised libraries, packages, and software. • T1195.002 Compromise Software Supply Chain — Selecting and maintaining trusted software components helps prevent integration of malicious or compromised libraries, packages, and software.

Related

Mitigates · MITRE ATT&CK (3)

  • T1195.001 Compromise Software Dependencies and Development Tools sub-technique
  • T1195.002 Compromise Software Supply Chain sub-technique
  • T1195 Supply Chain Compromise technique

Referenced by Compliance · has member (1)

  • CIS-16 Application Software Security CIS Control v8.1