{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"compliance_regulatory","domain":["Asset Management & Inventory","Secure Configuration & Change Management","Compliance, Audit & Assurance"],"inherent_rating":"low","taxonomy":["iso-27005-threat","iso-27005-vulnerability"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-unlicensed-counterfeit-software","description":"Fraudulent copying of software and deployment of pirated/counterfeit software (unlicensed or inadequately controlled) that may lack security patches or contain malicious code — a legal and security exposure.","details":{"category":"compliance_regulatory","impact":"low","inherent_rating":"low","likelihood":"medium","risk_id":"tech-unlicensed-counterfeit-software","taxonomies":["iso-27005-threat","iso-27005-vulnerability"],"treatment":"mitigate"},"id":"risk:tech-unlicensed-counterfeit-software","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Atech-unlicensed-counterfeit-software","sourceIds":["cobit-2019","iso-27001","nist-800-53","nist-csf-2","soc2"],"sourceUrl":null,"title":"Use of unlicensed, counterfeit or pirated software","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:232c97fa0350db0986af80588c18f037e25056fda721bcfbb8cbd1b766c8fd31","properties":{"rationale":"Quarterly software-inventory reconciliation surfaces unlicensed/unauthorized software for remediation.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-01-04dbd5db.json","sourceId":"uc:UC-ASSET-01","targetDetailPath":"/data/v1/records/risk-tech-unlicensed-counterfeit-software-91025350.json","targetId":"risk:tech-unlicensed-counterfeit-software","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:413bff0a4c011bdb77bc0343e3367618e8409e48951a34b61d0b11c6ce200ac6","properties":{"rationale":"Acceptable-use enforcement and locked-down centrally-managed endpoints prevent installation of unlicensed/pirated software.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-asset-06-d13d9c7f.json","sourceId":"uc:UC-ASSET-06","targetDetailPath":"/data/v1/records/risk-tech-unlicensed-counterfeit-software-91025350.json","targetId":"risk:tech-unlicensed-counterfeit-software","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:41b33684e4b96c5e7adadba8734dae6b1849c1f9c0a41ed507a73de84aba54a1","properties":{"rationale":"Maintaining a register of software-licensing/IP obligations and evaluating compliance (ISO A.5.32) directly reduces use of unlicensed or pirated software.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-audit-24-fa96fe18.json","sourceId":"uc:UC-AUDIT-24","targetDetailPath":"/data/v1/records/risk-tech-unlicensed-counterfeit-software-91025350.json","targetId":"risk:tech-unlicensed-counterfeit-software","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6e4f9e6ec5ac5bc825e3155264956ed35eb5a080be827d900b0ca440f5dfc8d9","properties":{"rationale":"Authenticity/integrity verification detects counterfeit software components, though license-entitlement tracking is the operative control for that risk.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-config-06-31f293f7.json","sourceId":"uc:UC-CONFIG-06","targetDetailPath":"/data/v1/records/risk-tech-unlicensed-counterfeit-software-91025350.json","targetId":"risk:tech-unlicensed-counterfeit-software","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:e76fb462579635e6868c557aac3de2c8654c2f1df52cceda40a8a4a9425862d6","properties":{"rationale":"Sourcing approved software from trusted sources and tracking installs against license entitlements directly prevents unlicensed or pirated software use.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-config-05-84d5ee43.json","sourceId":"uc:UC-CONFIG-05","targetDetailPath":"/data/v1/records/risk-tech-unlicensed-counterfeit-software-91025350.json","targetId":"risk:tech-unlicensed-counterfeit-software","type":"mitigates"}],"schemaVersion":1}