CM-11: User-installed Software

policies governing the installation of software by users are established;

software installation policies are enforced through methods ;

compliance with policies is monitored frequency .

Configuration management policy

procedures addressing user-installed software

configuration management plan

system security plan

system design documentation

system configuration settings and associated documentation

list of rules governing user installed software

system monitoring records

system audit records

continuous monitoring strategy

system security plan

other relevant documents or records

Organizational personnel with responsibilities for governing user-installed software

organizational personnel operating, using, and/or maintaining the system

organizational personnel monitoring compliance with user-installed software policy

organizational personnel with information security responsibilities

system/network administrators

Organizational processes governing user-installed software on the system

mechanisms enforcing policies and methods for governing the installation of software by users

mechanisms monitoring policy compliance