CCI-001782

CCI-001782 Definition

The organization updates the information system component inventory per organization-defined frequency.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-001782.

Control	Description
CM-8	The organization: CM-8a.: Develops and documents an inventory of information system components that: CM-8a.1.: Accurately reflects the current information system; CM-8a.2.: Includes all components within the authorization boundary of the information system; CM-8a.3.: Is at the level of granularity deemed necessary for tracking and reporting; and CM-8a.4.: Includes [Assignment: organization-defined information deemed necessary to achieve effective information system component accountability]; and CM-8b.: Reviews and updates the information system component inventory [Assignment: organization-defined frequency].

Control

Description

CM-8a.: Develops and documents an inventory of information system components that:
- CM-8a.1.: Accurately reflects the current information system;
- CM-8a.2.: Includes all components within the authorization boundary of the information system;
- CM-8a.3.: Is at the level of granularity deemed necessary for tracking and reporting; and
- CM-8a.4.: Includes [Assignment: organization-defined information deemed necessary to achieve effective information system component accountability]; and

CM-8b.: Reviews and updates the information system component inventory [Assignment: organization-defined frequency].