# SA-06 Software Usage Restrictions

NIST SP 800-53 control. Family: SA System and Services Acquisition. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.
Withdrawn from SP 800-53 by NIST. Its content moved into CM-10, SI-07.

Statement: The organization complies with software usage restrictions.
Guidance: Software and associated documentation are used in accordance with contract agreements and copyright laws. For software and associated documentation protected by quantity licenses, the organization employs tracking systems to control copying and distribution. The organization controls and documents the use of publicly accessible peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

## Patterns that use it (3)
- Important (2): SP-001 Client Module; SP-002 Server Module
- Standard (1): SP-025 Advanced Monitoring and Detection

## Clauses by framework (6 frameworks)
- iso_42001_2023: A.4.4
- anssi: Hygiene.20, SecNumCloud.13.1
- osfi_b13: B-13.2.2
- finma_circular: IV.A(28), IV.A(36)
- gdpr: Art.25(1)
- dora: Art.9(4)(e)

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SA-06
- Clauses only: /api/v1/controls/SA-06?fields=mappings
- Page for people: /controls/sa-06/