Detections
Analytics
800-53|CM-8
Title
INFORMATION SYSTEM COMPONENT INVENTORYDescription
The organization:Supplemental
Organizations may choose to implement centralized information system component inventories that include components from all organizational information systems. In such situations, organizations ensure that the resulting inventories include system-specific information required for proper component accountability (e.g., information system association, information system owner). Information deemed necessary for effective accountability of information system components includes, for example, hardware inventory specifications, software license information, software version numbers, component owners, and for networked components or devices, machine names and network addresses. Inventory specifications include, for example, manufacturer, device type, model, serial number, and physical location.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: CM-2,CM-6,PM-5
Category: CONFIGURATION MANAGEMENT
Family: CONFIGURATION MANAGEMENT
Priority: P1
Baseline Impact: LOW,MODERATE,HIGH
Audit Items
View all Reference Audit Items