ComplianceNIST 800-53 enhancement

NIST-SI-2(6) Removal of Previous Versions of Software and Firmware

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SI System and Information Integrity
Control
SI-2(6)

Control statement

Remove previous versions of [Assignment: software and firmware components] after updated versions have been installed.

Discussion

Previous versions of software or firmware components that are not removed from the system after updates have been installed may be exploited by adversaries. Some products may automatically remove previous versions of software and firmware from the system.

Related

Enhancement of · Compliance (1)

  • NIST-SI-2 Flaw Remediation NIST 800-53 control