← CIS Controls v8 in plain English

2.3 IG1

Control 2 / Inventory and Control of Software Assets

Address Unauthorized Software

Think of it likeGetting rid of any unwanted or unapproved apps that kids might have installed on the family computer.

In plain English

The family ensures that any unauthorized software is promptly removed or properly documented if it must be kept.

Related CSF subcategories (unofficial mapping)

DE.CM-09: Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events.ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained.PR.PS-02: Software is maintained, replaced, and removed commensurate with risk.PR.PS-05: Installation and execution of unauthorized software are prevented.RS.MI-02: Incidents are eradicated.