ENFORCEMENT

Joint Strategic Plan on Intellectual Property Enforcement
57
An example of a related policy is the OMB memorandum of
November 18, 2013, on “Enhancing the Security of Federal
Information and Information Systems” (OMB Memorandum
M-14-03), accessed from https://www.whitehouse.gov/
sites/default/files/omb/memoranda/2014/m-14-03.pdf. This
initiative included the establishment by the General Services
Administration and the Department of Homeland Security
of “a government-wide Blanket Purchase Agreement (BPA)
under Multiple Award Schedule 70, which Federal, State, local
and tribal governments can leverage to deploy a basic set of
capabilities to support continuous monitoring of security controls
in Federal information systems and environments of operation”
(p. 2). In addition to enhancing the Federal Government’s ability
to identify and respond to the risk of emerging cyber threats,
continuous monitoring also enables agencies to collect better
and more timely information about what types of software are
being used by agency staff (and by how many agency staff). Such
information is critical to informing the agency about its software
needs and to identifying any uses by agency staff of software that
is in excess of the applicable license or for which the agency has
not obtained the necessary license.
58
An example of a related statute is Section 406 of the
Cybersecurity Security Act of 2015, which directs the Inspectors
General to collect information and submit a report to Congress
regarding the computer security of specified types of Federal
computer systems. In the report, the Inspector General shall
include a description of the “policies and procedures followed
[by the agency] to conduct inventories of the software present
on the covered systems of the covered agency and the licenses
associated with such software” (subsection (b)(2)(D)(4)). The
Computer Security Act of 2015 is found at Division N of Pub.
L. No. 114-113 (2015), and Section 406 (“Federal Computer
Security”) is at 129 Stat. 2984-2985.
59
Several of these research categories have been identified,
and promoted, by the World Economic Forum. See World
Economic Forum, “State of the Illicit Economy: Briefing Papers”
(October 2015), accessed from http://www3.weforum.org/docs/
WEF_State_of_the_Illicit_Economy_2015_2.pdf.
SECTION 4
152