An operator should have procedures to control the configuration of software on their aircraft. In almost all cases, software in installed aircraft systems is considered an aircraft part, and as such is subject to the same record keeping processes and controls as standard aircraft parts.
The FAA Advisory Circular AC43-216 provides guidance for software management during aircraft maintenance.
https://www.faa.gov/regulations_poli...mentID/1032449
The UK CAA has published Leaflet 100-10 in their CAP 562 which address the subject and management of Field Loadable Software
https://publicapps.caa.co.uk/modalap...e=detail&id=92