Skip to main content

πŸ’Ό CM-12 Information Location (M)(H)

  • Contextual name: πŸ’Ό CM-12 Information Location (M)(H)
  • ID: /frameworks/fedramp-high-security-controls/cm/12
  • Located in: πŸ’Ό Configuration Management

Description​

a. Identify and document the location of [Assignment: organization-defined information] and the specific system components on which the information is processed and stored;

b. Identify and document the users who have access to the system and system components where the information is processed and stored; and

c. Document changes to the location (i.e., system or system components) where the information is processed and stored.

CM-12 Additional FedRAMP Requirements and Guidance:

Requirement: According to FedRAMP Authorization Boundary Guidance.

Similar​

  • Sections
    • /frameworks/nist-sp-800-53-r5/cm/12
  • Internal
    • ID: dec-c-6051cde0

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST SP 800-53 Revision 5 β†’ πŸ’Ό CM-12 Information Location1

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό FedRAMP Moderate Security Controls β†’ πŸ’Ό CM-12 Information Location (M)(H)1

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό CM-12(1) Automated Tools to Support Information Location (M)(H)