Assessment Objective
Determine if:
- CM-10(01) [Assignment: restrictions] are established for the use of open-source software.
Assessment Methods
Examine
- Configuration management policy
- software usage restrictions
- software contract agreements and copyright laws
- site license documentation
- list of software usage restrictions
- software license tracking reports
- configuration management plan
- system security plan
- system security plan
- other relevant documents or records
Interview
- Organizational personnel operating, using, and/or maintaining the system
- organizational personnel with software license management responsibilities
- organizational personnel with information security responsibilities
- system/network administrators
Test
- Organizational processes for tracking the use of software protected by quantity licenses
- organizational processes for controlling/documenting the use of peer-to-peer file sharing technology
- mechanisms implementing software license tracking
- mechanisms implementing and controlling the use of peer-to-peer files sharing technology
Prepojené úlohy
| Typ prepojenia | Úloha |
|---|---|
| blocks | CM-10(01) Open-source Software |