CCI-001785
CCI-001785 Definition
Status | |
Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
Determine if a centralized repository for the system component inventory is provided.
Validation Procedures
Examine: [SELECT FROM: Configuration management policy; procedures addressing system component inventory; configuration management plan; system design documentation; system security plan; system component inventory; system configuration settings and associated documentation; change control records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with component inventory management responsibilities; organizational personnel with security responsibilities; ]. Test: [SELECT FROM: Organizational processes for managing the system component inventory; mechanisms supporting and/or implementing system component inventory].