CCI-004328

Implementation Guidance

Determine if: - an inventory of Organizational systems is developed. - the inventory of Organizational systems is updated [PM-05_ODP; the frequency at which to update the inventory of Organizational systems is defined].

Validation Procedures

Examine: [SELECT FROM: Information security program plan; system inventory; procedures addressing system inventory development and maintenance; OMB FISMA reporting guidance; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with information security program planning and plan implementation responsibilities; organizational personnel responsible for developing and maintaining the system inventory; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for system inventory development and maintenance; mechanisms supporting the system inventory].