Navigate

CCI-001803

CCI-001803 Definition

The organization tracks the use of software protected by quantity licenses to control distribution of the software.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed tracks the use of software protected by quantity licenses to control distribution of the software. Software license tracking can be accomplished by manual methods (e.g., simple spreadsheets) or automated methods (e.g., specialized tracking applications) depending on organizational needs.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the tracking records to ensure the organization being inspected/assessed tracks the use of software protected by quantity licenses to control distribution of the software.

Compelling Evidence

1.) Supporting evidence concerning the usage of software documentation

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001803.

Control	Description
CM-10	The organization: CM-10a.: Uses software and associated documentation in accordance with contract agreements and copyright laws; CM-10b.: Tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and CM-10c.: Controls and documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Control

Description

CM-10

The organization:

CM-10a.: Uses software and associated documentation in accordance with contract agreements and copyright laws;

CM-10b.: Tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and

CM-10c.: Controls and documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.