Topic

Application management

Applicable to

all

History

Priority

must

Mar 2022

Unprivileged users do not have the ability to uninstall or disable approved software.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

Aug 2020

Users do not have the ability to uninstall or disable approved software.

Security control 0382 was modified to remove the recommendation that users not have the ability to install software.

Jul 2020

Users do not have the ability to install, uninstall or disable software.

2015

Users must not have the ability to install, uninstall or disable software.

2010

Agencies must ensure that for all servers and workstations:• system users do not have the ability to install or disable software without approval• installed software and operating system patching is current.

2008

Agencies should reduce potential vulnerabilities in their systems by: a. removing unnecessary file shares b. ensuring patching is up to date c. disabling access to all unnecessary input/output functionality.