CCI-000395

The organization develops an inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting.

Implementation Guidance

The organization being inspected/assessed documents inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented inventory and examines a sampling of information system components to ensure inventory is at the level of granularity deemed necessary for tracking and reporting.

Compelling Evidence

1.) Configuration (hardware) baseline

The controls below (if any) were marked by NIST as being related to CCI-000395.