CCI-000418

Include in the system component inventory information, a means for identifying by name, position, and/or role, individuals responsible and accountable for administering those components.

Implementation Guidance

Determine if individuals responsible and accountable for administering system components are identified by [CM-08(04)_ODP; one or more of the following PARAMETER VALUES is/are selected: {name; position; role}] in the system component inventory.

Validation Procedures

Examine: [SELECT FROM: Configuration management policy; procedures addressing system component inventory; configuration management plan; system security plan; system component inventory; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with component inventory management responsibilities; organizational personnel with information security responsibilities; system/network administrators]. Test: [SELECT FROM: Organizational processes for managing the system component inventory; mechanisms supporting and/or implementing the system component inventory].

The controls below (if any) were marked by NIST as being related to CCI-000418.