When to use this
Use this checklist before acquiring or installing software on operational systems, and during periodic review of supported operational software.
Related controls
- A.8.19 Installation of Software on Operational Systems
- A.5.32 Intellectual Property Rights
- Software and Content Licence Compliance Inventory
Verification checklist
- Business requirement recorded.
- Software owner identified.
- Licence entitlement confirmed.
- Intended usage is covered by licence.
- User/device/server/cloud scope checked.
- Vendor support level confirmed.
- Support expiry date recorded.
- End-of-life/end-of-support date reviewed.
- Security update availability checked.
- Exceptions or unsupported use risk-accepted.
Verification record
| Software | Version | Owner | Licence basis | Usage covered? | Support level | Support expiry | EOL/EOS date | Exception |
|---|---|---|---|---|---|---|---|---|
| TBD | TBD | TBD | TBD | Yes/No | TBD | TBD | TBD | TBD |
- Template
- Iso27001
- Technological controls
- Licence management
Note Metadata
Aliases: Software License and Support Verification Checklist
Source: 90 Templates/Software Licence and Support Verification Checklist.md
Related Notes
- ISO 27001 A.5.32 - Intellectual Property Rights
- A.8.19 Audit Evidence Pack
- ISO 27001 A.8.19 - Installation of Software on Operational Systems
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- A.8.19 Audit Checklist
- Software and Content Licence Compliance Inventory
- Templates MOC