CCI-000399

The organization develops an inventory of information system components that includes organization-defined information deemed necessary to achieve effective information system component accountability.

Implementation Guidance

The organization being inspected/assessed documents inventory of information system components that includes organization defined information deemed necessary to achieve effective information system component accountability.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented inventory and examines a sampling of information system components to ensure inventory includes organization defined information deemed necessary to achieve effective information system component accountability.

Compelling Evidence

1.) Configuration (hardware) baseline

The controls below (if any) were marked by NIST as being related to CCI-000399.