Skip to main content

💼 ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained

  • Contextual name: 💼 ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained
  • ID: /frameworks/nist-csf-v2.0/id-am/02
  • Located in: 💼 Asset Management (ID.AM)

Description

  1. Maintain inventories for all types of software and services, including commercial-off-the-shelf, open-source, custom applications, API services, and cloud-based applications and services
  2. Constantly monitor all platforms, including containers and virtual machines, for software and service inventory changes
  3. Maintain an inventory of the organization's systems

Similar

  • Sections
    • /frameworks/nist-csf-v1.1/id-am/02
    • /frameworks/nist-sp-800-53-r5/ac/20
    • /frameworks/nist-sp-800-53-r5/cm/08
    • /frameworks/nist-sp-800-53-r5/pm/05
    • /frameworks/nist-sp-800-53-r5/sa/05
    • /frameworks/nist-sp-800-53-r5/sa/09

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlags
💼 NIST CSF v1.1 → 💼 ID.AM-2: Software platforms and applications within the organization are inventoried57
💼 NIST SP 800-53 Revision 5 → 💼 AC-20 Use of External Systems5
💼 NIST SP 800-53 Revision 5 → 💼 CM-8 System Component Inventory93
💼 NIST SP 800-53 Revision 5 → 💼 PM-5 System Inventory11
💼 NIST SP 800-53 Revision 5 → 💼 SA-5 System Documentation5
💼 NIST SP 800-53 Revision 5 → 💼 SA-9 External System Services811

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlags

Policies (9)

PolicyLogic CountFlags
📝 AWS Account Config is not enabled in all regions 🟢1🟢 x6
📝 AWS DMS Replication Instance Auto Minor Version Upgrade is not enabled 🟢1🟢 x6
📝 AWS EC2 Security Group allows public IPv4 (0.0.0.0/0) access to admin ports 🟢1🟢 x6
📝 AWS EC2 Security Group allows public IPv6 (::/0) access to admin ports 🟢1🟢 x6
📝 AWS RDS Instance Auto Minor Version Upgrade is not enabled 🟠🟢1🟠 x1, 🟢 x6
📝 Azure App Service does not run the latest Java version 🟢🟢 x3
📝 Azure App Service does not run the latest PHP version 🟢🟢 x3
📝 Azure App Service does not run the latest Python version 🟢🟢 x3
📝 Google Cloud Asset Inventory API is not enabled 🟢1🟢 x6