# CM-10 — Software Usage Restrictions

- **Control ID:** CM-10
- **Family:** [CM](/md/families/CM.md)
- **Baselines:** low, moderate, high
- **Enhancement of:** No content available.

## Description

Use software and associated documentation in accordance with contract agreements and copyright laws; Track the use of software and associated documentation protected by quantity licenses to control copying and distribution; and Control and document the use of peer-to-peer file sharing technology to ensure that this capability is not used for the unauthorized distribution, display, performance, or reproduction of copyrighted work.

## Discussion

Software license tracking can be accomplished by manual or automated methods, depending on organizational needs. Examples of contract agreements include software license agreements and non-disclosure agreements.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

- [DE.CM-03](/md/csf/DE.CM-03.md) — Personnel activity and technology usage are monitored to find potentially adverse events
- [DE.CM-09](/md/csf/DE.CM-09.md) — DE.CM-09
- [PR.PS-01](/md/csf/PR.PS-01.md) — PR.PS-01

## Related controls

- [AC-17](/md/controls/AC-17.md)
- [AU-6](/md/controls/AU-6.md)
- [CM-7](/md/controls/CM-7.md)
- [CM-8](/md/controls/CM-8.md)
- [PM-30](/md/controls/PM-30.md)
- [SC-7](/md/controls/SC-7.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.