← ISO 27001 Annex A in plain English

A.8.19 A.8

Technological / A.8.19

Controlling software installed on operational systems

Think of it likeDeciding what gets installed in the house, rather than whatever anyone brings home.

In plain English

The family controls what software runs on the systems it depends on, so the working parts of the house are ones it chose.

Related CSF and CIS controls (unofficial mapping)