Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« HIPAA: Congressional and GAO Reports Say HHS Needs To Make Changes To Protect Patient Privacy | Main | Identity Theft: More Info On Fallout From The TJX Breach »

Software Licensing: Free Tools from the BSA & 10 Steps To Compliance

I saw an article published on February 1, "United States: 10 Simple Steps To Ensure Software Licensing Compliance."

It had been a while since I had seen anyone write about software compliance. However, from what I've seen within organizations and from I've heard information security and compliance folks talking about, the challenges for ensuring software compliance still exist, and in many ways are more hard to tackle with all the emerging ways in which end users can load software onto their computers they use for business. This article provides a nice summary list of actions that organizations of all sizes, from the very smallest to the largest, and in every industry can take to help ensure licensing compliance.

Making your personnel aware of the issues is an important part of the compliance process and necessary for successful compliance. The Business Software Alliance (BSA) has some great awareness and training tools available at their site that all organizations can use for their education efforts. Small and medium sized businesses (SMBs) in particular, with their typical limited resources and lack of staff specializing in information assurance issues, should find these very useful. Here are just a few of the resources:


· BSA Training Video: A downloadable "short, educational video to present that emphasizes the important issues about software piracy."

· Software Asset Management (SAM) Checklist (PDF): "Follow these five simple steps to prevent software piracy roulette."

· Software Needs Analysis Form: "A sample form."

· SAM Tips/Best Practices (PDF): "Tips and best practices at your finger tips."

· SAM Power Point for Employees: A presentation to "communicate to your employees the importance of software audits, software compliance and licensing. It will help prevent the risks associated with workplace software piracy."

· SAM Employee Policy: "An employee policy on software management can help a business avoid the risk."

· SAM Employee Memorandum: "This memo is a companion to the employee policy."

· Workroom Posters: "Ten Reasons It's Important to Be A Responsible Software User" & "7 Tips for Preventing Software Piracy"

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/307

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.