ISO 27001 8.19 Installation of Software on Operational Systems Requirement:
"Procedures and measures shall be implemented to securely manage software installation on operational systems."[1]
ISO 27001 8.19 Installation of Software on Operational Systems Requirement Explanation:
Software installations must be approved by the IT group. Allowing users to install software without restrictions on their system's increases cyber risk. User's may accidentally install malware on their systems. Additionally the more software in the information system the larger the attack surface. Unmanaged software is also difficult to keep updated which can result increased vulnerabilities.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.