To provide guidelines necessary to manage software licensing in accordance with applicable copyright laws.

In accordance with the COV ITRM 501-01, software management must be implemented to ensure the System Office and Colleges are in compliance with applicable laws.

The Software License Management Standard is applicable to the System Office and all Colleges.

Maintenance of proper software security requires that the System Office and colleges take the necessary steps to ensure proper software and documentation is maintained for all Commonwealth of Virginia systems.

Requirement: The System Office and colleges must have a procedure in place to ensure that only approved software is used on all IT systems.

Recommendation: The System Office and colleges should consider including a requirement of approval by the ISO or other authorizing official for all new software installed and used on IT systems.

Recommendation: The System Office and colleges should require that personal software not be installed on IT systems.

Recommendation: The System Office and colleges should include software licensing and copyright laws in the security awareness and training program.

Requirement: The System Office and all colleges must have procedures in place to periodically access that all software is used in accordance with license agreements.