Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.9: Communications security and virtualisation security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.9.2.7: Keep an auditable inventory of the virtual environment and valid software licences

What does 5.9.2.7 require?

Because virtual network components such as virtual switches and firewalls are hard to find with online tools, a comprehensive, auditable record of every virtual machine and infrastructure component is documented in detail and kept current, and software licences are evaluated, negotiated and refined with vendors so that instance-based, hardware-based, usage-based or client-based licensing remains valid and sufficient in the virtualised environment.

Maintained by Gerard Blokdyk

Other controls in 5.9: Communications security and virtualisation security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.