Intellectual Property Protection

The main focus here is to ensure that the protection of intellectual property is identified as a key business driver, and that the compliance effort of the business take this into account.

Cloud Controls Matrix (CCM) Data

CO-06 | Compliance | Intellectual Property

Control Specification +-

Policy, process and procedure shall be established and implemented to safeguard intellectual property and the use of proprietary software within the legislative jurisdiction and contractual constraints governing the organization.

Architectural Relevance +-

Physical	Network	Compute	App	Data
False	False	False	False	True

Corp Gov Relevance +-

Corp Gov Relevance
True

Cloud Service Delivery Model Applicability +-

SaaS	PaaS	IaaS
True	True	True

Supplier Relationship +-

Service Provider	Tenant / Consumer
True	True

Scope Applicability +-

COBIT 4.1	HIPAA / HITECH Act	ISO/IEC 27001-2005
		Clause 4.2.1 A.6.1.5 A.7.1.3 A.10.8.2 A.12.4.3 A.15.1.2

NIST SP800-53 R3	FedRAMP (Final 2012) Low Impact	FedRAMP (Final 2012) Moderate Impact	PCI DSS v2.0
SA-6 SA-7 PM-5	NIST SP 800-53 R3 SA-6 NIST SP 800-53 R3 SA-7	NIST SP 800-53 R3 SA-6 NIST SP 800-53 R3 SA-7

BITS Shared Assessments SIG v6.0	BITS Shared Assessments SIG v5.0	GAPP (Aug 2009)
L.4

Jericho Forum	NERC CIP
Commandment #1 Commandment #2 Commandment #3

Consensus Assessments Initiative Questionnaire (CAIQ) Data

Compliance (CO) | ID #CO-06.1

Do you have policies and procedures in place describing what controls you have in place to protect tenants intellectual property?

Compliance Mapping +-

COBIT	HIPAA	ISO27001	SP800_53
		Clause 4.2.1 A.6.1.5 A.7.1.3 A.10.8.2 A.12.4.3 A.15.1.2	NIST SP800-53 R3 SA-6 NIST SP800-53 R3 SA-7 NIST SP800-53 R3 PM-5

FedRAMP	PCI_DSS	BITS	GAPP
NIST SP800-53 R3 SA-6 NIST SP800-53 R3 SA-7 NIST SP800-53 R3 PM-5		SIG v6.0: L.4

Model Applicability +-

SaaS	PaaS	IaaS
True	True	True

Scope Applicability +-

SP	CUST
True	True