💼 ID.AM-08: Systems, hardware, software, services, and data are managed throughout their life cycles
- ID:
/frameworks/nist-csf-v2.0/id-am/08
Stats
not available
Description
- Integrate cybersecurity considerations throughout the life cycles of systems, hardware, software, and services
- Integrate cybersecurity considerations into product life cycles
- Identify unofficial uses of technology to meet mission objectives (i.e., shadow IT)
- Periodically identify redundant systems, hardware, software, and services that unnecessarily increase the organization's attack surface
- Properly configure and secure systems, hardware, software, and services prior to their deployment in production
- Update inventories when systems, hardware, software, and services are moved or transferred within the organization
- Securely destroy stored data based on the organization's data retention policy using the prescribed destruction method, and keep and manage a record of the destructions
- Securely sanitize data storage when hardware is being retired, decommissioned, reassigned, or sent for repairs or replacement
- Offer methods for destroying paper, storage media, and other physical forms of data storage
Similar
- Sections
/frameworks/nist-csf-v1.1/pr-ds/03/frameworks/nist-csf-v1.1/pr-ma/01/frameworks/nist-csf-v1.1/pr-ma/02/frameworks/nist-csf-v1.1/pr-ip/06/frameworks/nist-sp-800-53-r5/cm/09/frameworks/nist-sp-800-53-r5/cm/13/frameworks/nist-sp-800-53-r5/ma/02/frameworks/nist-sp-800-53-r5/ma/06/frameworks/nist-sp-800-53-r5/pl/02/frameworks/nist-sp-800-53-r5/pm/23/frameworks/nist-sp-800-53-r5/pm/22/frameworks/nist-sp-800-53-r5/sa/03/frameworks/nist-sp-800-53-r5/sa/04/frameworks/nist-sp-800-53-r5/sa/08/frameworks/nist-sp-800-53-r5/sa/22/frameworks/nist-sp-800-53-r5/si/12/frameworks/nist-sp-800-53-r5/si/18/frameworks/nist-sp-800-53-r5/sr/05/frameworks/nist-sp-800-53-r5/sr/12
Similar Sections (Take Policies From)
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|