STIGhub
STIGs
RMF Controls
Compare
← All Controls
CM-8
Configuration Management
Rev 4
System Component Inventory
CCI Identifiers (29)
CCI-000389
The organization develops an inventory of information system components that accurately reflects the current information system.
CCI-000390
The organization documents an inventory of information system components that accurately reflects the current information system.
CCI-000391
The organization maintains an inventory of information system components that accurately reflects the current information system.
CCI-000392
The organization develops an inventory of information system components that includes all components within the authorization boundary of the information system.
CCI-000393
The organization documents an inventory of information system components that includes all components within the authorization boundary of the information system.
CCI-000394
The organization maintains an inventory of information system components that is consistent with the authorization boundary of the information system.
CCI-000395
The organization develops an inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting.
CCI-000396
The organization documents an inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting.
CCI-000397
The organization maintains an inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting.
CCI-000398
Defines information deemed necessary to achieve effective system component accountability.
CCI-000399
The organization develops an inventory of information system components that includes organization-defined information deemed necessary to achieve effective information system component accountability.
CCI-000400
The organization documents an inventory of information system components that includes organization-defined information deemed necessary to achieve effective information system component accountability.
CCI-000401
The organization maintains an inventory of information system components that includes organization-defined information deemed necessary to achieve effective property accountability.
CCI-000402
The organization develops an inventory of information system components that is available for review by designated organizational officials.
CCI-000403
The organization documents an inventory of information system components that is available for review by designated organizational officials.
CCI-000404
The organization maintains an inventory of information system components that is available for review by designated organizational officials.
CCI-000405
The organization develops an inventory of information system components that is available for audit by designated organizational officials.
CCI-000406
The organization documents an inventory of information system components that is available for audit by designated organizational officials.
CCI-000407
The organization maintains an inventory of information system components that is available for audit by designated organizational officials.
CCI-001779
Defines the frequency on which the system component inventory is to be reviewed and updated.
CCI-001780
Review and update the system component inventory per organization-defined frequency.
CCI-001781
The organization defines the frequency on which the information system component inventory is to be updated.
deprecated
CCI-001782
The organization updates the information system component inventory per organization-defined frequency.
deprecated
CCI-003962
Develop and document an inventory of system components that accurately reflects the system.
CCI-003963
Develop and document an inventory of system components that includes all components within the system.
CCI-003964
Develop and document an inventory of system components that does not include duplicate accounting of components or components assigned to any other system.
CCI-003965
Develop and document an inventory of system components that is at the level of granularity deemed necessary for tracking.
CCI-003966
Develop and document an inventory of system components that is at the level of granularity deemed necessary for reporting.
CCI-003967
Develop and document an inventory of system components that includes organization-defined information deemed necessary to achieve effective system component accountability.
Linked STIG Checks (6)
Across 1 STIGs. Click to expand.
▶
Enterprise Voice, Video, and Messaging Policy Security Requirements Guide
6 checks