#iso27001/2013
### A.14.2.4 Restrictions on changes to software packages
Modifications to software packages shall be discouraged, limited to necessary changes and all changes shall be strictly controlled.