CM-10: Software Usage Restrictions
Control Family:
CSF v1.1 References:
Baselines:
- Low
- CM-10
- Moderate
- CM-10
- High
- CM-10
Next Version:
- NIST Special Publication 800-53 Revision 5.2.0:
- CM-10: Software Usage Restrictions
Control Statement
The organization:
- Uses software and associated documentation in accordance with contract agreements and copyright laws;
- Tracks the use of software and associated documentation protected by quantity licenses to control copying and distribution; and
- Controls and documents the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.
Supplemental Guidance
Software license tracking can be accomplished by manual methods (e.g., simple spreadsheets) or automated methods (e.g., specialized tracking applications) depending on organizational needs.
Control Enhancements
CM-10(1): Open Source Software
Baseline(s):
The organization establishes the following restrictions on the use of open source software: [Assignment: organization-defined restrictions].