Obtain software and data employed during system component and service refreshes from the following trusted sources: [Assignment: organization-defined trusted sources].
Implementation
Description
Trusted sources include software and data from write-once, read-only media or from selected offline secure storage facilities.