CM-10 Software Usage Restrictions
a. Use software and associated documentation in accordance with contract agreements and copyright laws;
b. Track the use of software and associated documentation protected by quantity licenses to control copying and distribution; and
c. Control and document the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.
Baselines
- L
- M
- H
- P
Guidance
Software license tracking can be accomplished by manual or automated methods, depending on organizational needs. Examples of contract agreements include software license agreements and non-disclosure agreements.
Control Enhancements 1
- CM-10(01) Open-source Software L M H P
Related controls 6
- AC-17 Remote Access L M H P
- AU-06 Audit Record Review, Analysis, and Reporting L M H P
- CM-07 Least Functionality L M H P
- CM-08 System Component Inventory L M H P
- PM-30 Supply Chain Risk Management Strategy L M H P
- SC-07 Boundary Protection L M H P