CCI-000418

The organization includes, in the information system component inventory information, a means for identifying by name, position, and/or role, individuals responsible/accountable for administering those components.

Implementation Guidance

The organization being inspected/assessed documents within their information system component inventory, the name and position or role of individuals responsible/accountable for administering those components or a means of identifying those individuals.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the information system component inventory to verify that the organization being inspected/assessed identifies within their inventory, the name and position or role of individuals responsible/accountable for administering those components or a means of identifying those individuals.

Compelling Evidence

1.) Information System Component Inventory, which documents the name and position or role of individuals responsible/accountable for administering those components or a means of identifying those individuals

The controls below (if any) were marked by NIST as being related to CCI-000418.