SA-06 Software Usage Restrictions

Control: The organization complies with software usage restrictions.

Supplemental Guidance: Software and associated documentation are used in accordance with contract agreements and copyright laws. For software and associated documentation protected by quantity licenses, the organization employs tracking systems to control copying and distribution. The organization controls and documents the use of publicly accessible peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Control Enhancements: (0) None.

Baseline: LOW SA-6 MOD SA-6 HIGH SA-6

Family: System And Services Acquisition

Class: Management

ISO 17799 mapping: 15.1.2

COBIT 4.1 mapping: DS9.3

PCI-DSS v2 mapping: None.