← CIS Controls v8 in plain English

16.4 IG2

Control 16 / Application Software Security

Establish and Manage an Inventory of Third-Party Software Components

Think of it likeKeeping a list of all the materials used to build your house and checking their quality regularly.

In plain English

An inventory of every third-party software component is kept and its quality checked regularly.

Related CSF subcategories (unofficial mapping)

GV.SC-09: Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle.PR.PS-06: Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle.