Navigate

CCI-001726

CCI-001726 Definition

Use software in accordance with contract agreements.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if software and associated documentation are used in accordance with contract agreements and copyright laws.

Validation Procedures

Examine: [SELECT FROM: Configuration management policy; software usage restrictions; software contract agreements and copyright laws; site license documentation; list of software usage restrictions; software license tracking reports; configuration management plan; system security plan; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel operating, using, and/or maintaining the system; organizational personnel with software license management responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Organizational processes for tracking the use of software protected by quantity licenses; organizational processes for controlling/documenting the use of peer-to-peer file sharing technology; mechanisms implementing software license tracking; mechanisms implementing and controlling the use of peer-to-peer files sharing technology].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001726.

Control	Description
CM-10	a: Use software and associated documentation in accordance with contract agreements and copyright laws; b: Track the use of software and associated documentation protected by quantity licenses to control copying and distribution; and c: Control and document the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Control

Description

CM-10

a: Use software and associated documentation in accordance with contract agreements and copyright laws;

b: Track the use of software and associated documentation protected by quantity licenses to control copying and distribution; and

c: Control and document the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.