All software installed or used within the company is formally required to be recorded and licensed
The software inventory policy facet requires every tool in use to be recorded, licensed, and approved before adoption, the written commitment A.5.32 needs to prevent unlicensed use.
This policy control requires all software and SaaS in business use to be recorded and licensed, covering the software slice of A.5.9's asset inventory.