CCI-001805

The organization establishes organization-defined policies governing the installation of software by users.

Implementation Guidance

The organization being inspected/assessed documents their policies governing the installation of software by users (e.g., user agreements, CM plan, etc).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documented policies governing the installation of software by users (e.g., user agreements, CM plan, etc) to ensure the organization being inspected/assessed establishes policies governing the installation of software by users.

Compelling Evidence

1.) Standard user agreements 2.) Signed and dated configuration management plan

The controls below (if any) were marked by NIST as being related to CCI-001805.