M5.2.2 - INTELLECTUAL PROPERTY RIGHTS (IPR)
The entity shall implement the appropriate procedures to ensure compliance with legislative, regulatory, and contractual requirements on the use of material in respect of which there may be intellectual property rights and on the use of proprietary software products.
Back to T2.3.4 - P3 - EQUIPMENT MAINTENANCE
The following guidelines should be considered to protect any material that may be considered intellectual property:
- A. Publishing an intellectual property rights compliance policy which defines the legal use of software and information products
- B. Acquiring software only through known and reputable sources, to ensure that copyright is not violated
- C. Maintaining awareness of policies to protect intellectual property rights, and giving notice of the intent to take disciplinary action against personnel breaching them
- D. Maintaining appropriate asset registers, and identifying all assets with requirements to protect intellectual property rights
- E. Maintaining proof and evidence of ownership of licenses, master disks, manuals, etc.
- F. Implementing controls to ensure that any maximum number of users permitted is not exceeded
- G. Carrying out checks that only authorized software and licensed products are installed;
- H. Providing a policy for maintaining appropriate license conditions
- I. Providing a policy for disposing or transferring software to others
- J. Using appropriate audit tools
- K. Complying with terms and conditions for software and information obtained from public networks
- L. Not duplicating, converting to another format or extracting from commercial recordings (film, audio- other than permitted by copyright law
- M. Not copying in full or in part, books, articles, reports or other documents, other than permitted by copyright law
