← Controls / SA

SA-06 Software Usage Restrictions

System and Services Acquisition

Withdrawn

NIST has withdrawn this control from SP 800-53. Its content moved into CM-10 and SI-07. The description below is the one it had before.

Description

The organization complies with software usage restrictions.

Supplemental Guidance

Software and associated documentation are used in accordance with contract agreements and copyright laws. For software and associated documentation protected by quantity licenses, the organization employs tracking systems to control copying and distribution. The organization controls and documents the use of publicly accessible peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

Patterns that use this control (3)

Grouped by the emphasis each pattern gives it.

Compliance Mappings

ISO 42001:2023

A.4.4

ANSSI

Hygiene.20SecNumCloud.13.1

FINMA Circular 2023/1

IV.A(28)IV.A(36)

OSFI B-13

B-13.2.2

EU GDPR

Art.25(1)

EU DORA

Art.9(4)(e)

ISO 17799 (legacy)

15.1.2

COBIT 4.1 (legacy)

DS9.3