CCI-001805

Implementation Guidance

The organization being inspected/assessed documents their policies governing the installation of software by users (e.g., user agreements, CM plan, etc).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documented policies governing the installation of software by users (e.g., user agreements, CM plan, etc) to ensure the organization being inspected/assessed establishes policies governing the installation of software by users.

Compelling Evidence

1.) Standard user agreements 2.) Signed and dated configuration management plan