💼 CM-8 System Component Inventory

• ID: /frameworks/nist-sp-800-53-r5/cm/08

Description

a. Develop and document an inventory of system components that:

1. Accurately reflects the system;
2. Includes all components within the system;
3. Does not include duplicate accounting of components or components assigned to any other system;
4. Is at the level of granularity deemed necessary for tracking and reporting; and
5. Includes the following information to achieve system component accountability: [Assignment: organization-defined information deemed necessary to achieve effective system component accountability]; and b. Review and update the system component inventory [Assignment: organization-defined frequency].

Similar

• Sections
  • /frameworks/aws-fsbp-v1.0.0/config/01
  • /frameworks/aws-fsbp-v1.0.0/fsx/02
  • /frameworks/aws-fsbp-v1.0.0/service-catalog/01
  • /frameworks/aws-fsbp-v1.0.0/ssm/01
  • /frameworks/aws-fsbp-v1.0.0/ssm/03
• Internal
  • ID: dec-c-cc75dbf4

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Config.1] AWS Config should be enabled and use the service-linked role for resource recording			1		no data
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [FSx.2] FSx for Lustre file systems should be configured to copy tags to backups					no data
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [ServiceCatalog.1] Service Catalog portfolios should be shared within an AWS organization only					no data
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [SSM.1] Amazon EC2 instances should be managed by AWS Systems Manager					no data
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [SSM.3] Amazon EC2 instances managed by Systems Manager should have an association compliance status of COMPLIANT					no data

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 FedRAMP High Security Controls → 💼 CM-8 System Component Inventory (L)(M)(H)	4		5		no data
💼 FedRAMP Low Security Controls → 💼 CM-8 System Component Inventory (L)(M)(H)			2		no data
💼 NIST CSF v2.0 → 💼 ID.AM-01: Inventories of hardware managed by the organization are maintained			4		no data
💼 NIST CSF v2.0 → 💼 ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained			9		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 CM-8(1) System Component Inventory _ Updates During Installation and Removal			2		no data
💼 CM-8(2) System Component Inventory _ Automated Maintenance			1		no data
💼 CM-8(3) System Component Inventory _ Automated Unauthorized Component Detection			1		no data
💼 CM-8(4) System Component Inventory _ Accountability Information					no data
💼 CM-8(5) System Component Inventory _ No Duplicate Accounting of Components					no data
💼 CM-8(6) System Component Inventory _ Assessed Configurations and Approved Deviations					no data
💼 CM-8(7) System Component Inventory _ Centralized Repository					no data
💼 CM-8(8) System Component Inventory _ Automated Location Tracking					no data
💼 CM-8(9) System Component Inventory _ Assignment of Components to Systems					no data

Policies (2)

Policy	Logic Count	Flags	Compliance
🛡️ AWS Account Config is not enabled in all regions🟢	1	🟢 x6	no data
🛡️ Google Cloud Asset Inventory API is not enabled🟢	1	🟢 x6	no data