Navigate

CCI-001733

CCI-001733 Definition

The organization documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documentation for the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Compelling Evidence

1.) Copy of P2P ports being blocked by firewall 2.) Copy of system security plan (SSP) policy referencing peer-to-peer file sharing technology section

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001733.

Control	Description
CM-10	The organization: CM-10a.: Uses software and associated documentation in accordance with contract agreements and copyright laws; CM-10b.: Tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and CM-10c.: Controls and documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Control

Description

CM-10

The organization:

CM-10a.: Uses software and associated documentation in accordance with contract agreements and copyright laws;

CM-10b.: Tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and

CM-10c.: Controls and documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.