IBM Cloud Docs
ESA-4 - Tracking and Removal of NPT

ESA-4 - Tracking and Removal of NPT

Control requirements

ESA-4 - 0

Software that has flaws that cannot be remediated per vendor dependency must be tracked and possibly removed if it poses high risk and is no longer supported.