Most security conversations focus on what software exists in an environment. CIS Control 2.2 pushes the conversation one step further by asking a more important question: Is that software still supported? Because software that no longer receives vendor updates, security patches, or maintenance isn’t just outdated—it’s dangerous.   What Is CIS Control 2.2? This safeguard focuses organizations on confirming that all authorized software in their environment is still supported by the vendor...