os_remove_software_components_after_updates Must remove all software components after updated versions installed
NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
All changes in this version
Title
Must remove all software components after updated versions installed
Control
The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
Discussion
Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.
Related controls
si-2.6
Fix
The technology inherently meets this requirement. No fix is required.