NIST800-CM-10 CM-10 Software Usage Restrictions
NIST800-CM-10 in NIST SP 800-53 Rev 5 (NIST SP 800-53 Rev 5, Release 5.2.0). All NIST SP 800-53 Rev 5 controls held. Open NIST SP 800-53 Rev 5 on the standards site.
The control as we hold it
CM-10 Software Usage Restrictions. a. Use software and associated documentation in accordance with contract agreements and copyright laws; b. Track the use of software and associated documentation protected by quantity licenses to control copying and distribution; and c. Control and document the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.
Reviewed and closest counterparts in the other frameworks
Reviewed rows come from a released pair; a closest match is the nearest held text and is not a reviewed row.
SOC 2
- SOC2-CC6.8 CC6.8 Preventing and detecting unauthorised or malicious software (closest match)
What an auditor commonly asks for
General guidance for this control area (domain: CM - Configuration Management), in our words, not a statement of the standard and not binding on an assessor.
- the configuration baseline
- the change-control records
- the component inventory with owners