11. Software must be kept up to date on all computers and devices that process or store Harvard confidential information.

Applying Patches

D3: Operating system and application patches must be applied promptly.

Password Management

SA8: Mechanisms for users to set or change passwords must be secure. Systems that manage passwords must be configured securely. Storage and management of passwords requires L4 security.