Why it matters
Unlicensed software or misused third-party IP is a real compliance exposure many small teams overlook.
How a self-led small team implements it
A software asset list with license status is enough evidence at small scale.
What auditors expect to see
Software license inventory.
Track A.5.32 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS