risk
Use of unlicensed, counterfeit or pirated software
Fraudulent copying of software and deployment of pirated/counterfeit software (unlicensed or inadequately controlled) that may lack security patches or contain malicious code — a legal and security exposure.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- compliance_regulatory
- domain
- Asset Management & Inventory
- Secure Configuration & Change Management
- Compliance, Audit & Assurance
- taxonomy
- iso-27005-threat
- iso-27005-vulnerability
- inherent_rating
- low
Details
- risk_id
- tech-unlicensed-counterfeit-software
- category
- compliance_regulatory
- likelihood
- medium
- impact
- low
- inherent_rating
- low
- treatment
- mitigate
- taxonomies
- iso-27005-threat
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software mitigates Use of unlicensed, counterfeit or pirated software
- strength
- related
- rationale
- Quarterly software-inventory reconciliation surfaces unlicensed/unauthorized software for remediation.
- UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems mitigates Use of unlicensed, counterfeit or pirated software
- strength
- primary
- rationale
- Acceptable-use enforcement and locked-down centrally-managed endpoints prevent installation of unlicensed/pirated software.
- UC-AUDIT-24 — Manage compliance with external legal and regulatory requirements mitigates Use of unlicensed, counterfeit or pirated software
- strength
- primary
- rationale
- Maintaining a register of software-licensing/IP obligations and evaluating compliance (ISO A.5.32) directly reduces use of unlicensed or pirated software.
- UC-CONFIG-06 — Verify authenticity and integrity of hardware and software mitigates Use of unlicensed, counterfeit or pirated software
- strength
- related
- rationale
- Authenticity/integrity verification detects counterfeit software components, though license-entitlement tracking is the operative control for that risk.
- UC-CONFIG-05 — Permit only authorized software installation and use mitigates Use of unlicensed, counterfeit or pirated software
- strength
- primary
- rationale
- Sourcing approved software from trusted sources and tracking installs against license entitlements directly prevents unlicensed or pirated software use.