Keeping licensed software up to date

The organisation has to make sure that all licensed software are updated with in 14 days of the update coming live when:

• The update fixes vulnerabilities that are considered critical or high risk
• Supplier does not release details about the severity of the vulnerability

Unmanaged installations of software on computers can lead to vulnerabilities and security breaches.

The organization should determine what types of software or updates each user can install. The instructions may include e.g. the following guidelines:

• only specially designated persons may install new software on the devices
• programs previously designated as secure may be installed by anyone
• use of certain software may be impossible for everyone
• existing software updates and security patches are allowed to be installed by anyone