Software Licensing

Risks, Vulnerabilities and Threats

  • Copyright infringement, illegal or unauthorized copies of software are obtained and used
  • Not taking advantage of volume/site license discounts

 

Control Objectives and Operational Goals

  • Policies in place
  • Periodic reconciliation made between licenses purchased and software installed
  • Maintaining documentation supporting the purchase of software
  • Associating each software license to a particular machine
  • Maintaining a software inventory and license additions, deletions, or expirations
  • Removing demonstration, trial, or test copies of software within the specified timeframe when the software is not purchased.
  • Limit ability to install software/malware for general users