ESA-4 - Tracking and Removal of NPT
Control requirements
ESA-4 - 0
Software that has flaws that cannot be remediated per vendor dependency must be tracked and possibly removed if it poses high risk and is no longer supported.
Software that has flaws that cannot be remediated per vendor dependency must be tracked and possibly removed if it poses high risk and is no longer supported.