Expert Advice Community

Guest

Freeware software on product environment

  Quote
Guest
Guest user Created:   Aug 20, 2017 Last commented:   Aug 20, 2017

Freeware software on product environment

can you please let me know according to ISO 27001:2013 standards can we allow/access freeware on production environment if the organisation is certified with ISO 27001:2013
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Aug 20, 2017

Answer: ISO 27001:2013 does not define what can or cannot be allowed/accessed in an organization, but requires that any decision made is based on the results of a risk assessment, applicable legal requirements and top management decision. So, you should consult these sources to verify if you can allow/access freeware on production environment.

What I can tell you is that some freeware have licenses that forbids them to use in commercial environments (you have to use the paid version), so you should consult the terms of the software you are considering.

This article will provide you further explanation about software installation:
- Implementing restrictions on software installation using ISO 27001 control A.12.6.2 https://advisera.com/27001academy/blog/2016/02/08/implementing-restrictions-on-software-installation-using-iso-27001-control-a-12-6-2/

These materials will a lso help you regarding software installation:
- ISO 27001 Annex A Controls in Plain English https://advisera.com/books/iso-27001-annex-controls-plain-english/
- Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Aug 20, 2017

Aug 20, 2017

Suggested Topics

Guest user Created:   Sep 30, 2023 ISO 27001 & 22301
Replies: 1
0 0

Environment and Scope

Monica Created:   Mar 01, 2023 ISO 27001 & 22301
Replies: 2
0 0

Aruba Products