If you install certain components, no matter whether it’s software or hardware, of course you do a security audit, but then necessarily, either in a emergency situation, for example when it’s out of service or whether there’s just a security vulnerability that’s discovered and disclosed, you will probably have to update that piece of software and firmware, and even hardware, from the vendor.