SI-02.6 ยท Removal of Previous Versions of Software and Firmware

Control Description

Remove previous versions of {{ insert: param, si-02.06_odp }} after updated versions have been installed.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Enhancement
Control Statement
The control requirements

Remove previous versions of {{ insert: param, si-02.06_odp }} after updated versions have been installed.

Supplemental Guidance

Previous versions of software or firmware components that are not removed from the system after updates have been installed may be exploited by adversaries. Some products may automatically remove previous versions of software and firmware from the system.