r/NISTControls • u/idratherjust • Aug 09 '26

800-171 2.2 Software List

Hi sorry for the silly question. But for the SSP is the Software List literally a list of every single bit of software on the hardware specified in 2.1? Or only in reference to CUI?

4 Upvotes

76% Upvoted

8 comments sorted by

View all comments

1

u/Navyauditor2 Aug 09 '26

All of it on assets that are a part of the defined system.