Software licences are managed so that the enterprise holds the optimal number to support business needs, with enough licences owned to cover the installed software actually in use: a register of licences bought and their agreements is kept; an audit regularly finds every installed instance of licensed software; installed instances are compared with licences owned, using a compliance measurement method consistent with the licence and the contract; where fewer instances are installed than licences owned, the enterprise decides whether to keep or end the surplus, taking savings on maintenance, training and other costs into account; where instances exceed licences owned, unneeded installations are removed first and more licences bought if still needed; and the enterprise regularly considers whether upgrading products and licences would give better value.
This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.