[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-8-19":3},{"item":4,"lessons":16,"controls":26,"related":48},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-8-19","Annex A 8.19","ISO\u002FIEC 27001:2022 Annex A 8.19: Installation of software on operational systems",2,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects procedures and measures to be implemented to securely manage software installation on operational systems. Its purpose is to protect the integrity of operational systems and prevent exploitation of technical vulnerabilities.\n\n**In practice.** Good practice means only authorised staff can install software on production systems, installations go through change management and testing, and users are restricted from installing software on their devices, for example through application control or managed app stores. Vendor-supplied software is kept at supported versions. Auditors look for installation rules, change records and technical restrictions.\n\n**Common gaps.** Typical gaps are local administrator rights for end users, unapproved tools on servers and browser extensions that are not controlled. Software installed for troubleshooting is often never removed, and installed software is not compared against an approved list.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22],{"slug":19,"title":20,"published_at":21},"fake-ai-tools-and-commoditized-access-threaten-smbs-in-2026","Fake AI Tools and Commoditized Access Threaten SMBs in 2026","2026-06-25T12:21:29.037+00:00",{"slug":23,"title":24,"published_at":25},"usb-lnk-worm-deploys-crypto-clipper-via-tor-based-c2","USB LNK Worm Deploys Crypto Clipper via Tor-Based C2","2026-06-18T16:20:41.907+00:00",[27,31,36,40,44],{"slug":28,"name":29,"problem":30,"stories":9},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":32,"name":33,"problem":34,"stories":35},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",1,{"slug":37,"name":38,"problem":39,"stories":35},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":41,"name":42,"problem":43,"stories":35},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":45,"name":46,"problem":47,"stories":35},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[49,54,59,63,67,71,76,80],{"family":50,"item":51,"code":52,"title":53,"together":9},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",{"family":55,"item":56,"code":57,"title":58,"together":35},"cis","14","Control 14","Security Awareness and Skills Training",{"family":5,"item":60,"code":61,"title":62,"together":35},"a-6-7","Annex A 6.7","Remote working",{"family":55,"item":64,"code":65,"title":66,"together":35},"2","Control 2","Inventory and Control of Software Assets",{"family":55,"item":68,"code":69,"title":70,"together":35},"6","Control 6","Access Control Management",{"family":72,"item":73,"code":74,"title":75,"together":35},"gdpr","32","Article 32","Security of processing",{"family":55,"item":77,"code":78,"title":79,"together":35},"16","Control 16","Application Software Security",{"family":55,"item":81,"code":82,"title":83,"together":35},"13","Control 13","Network Monitoring and Defense"]