+CM-08(04) Accountability Information
|
CM-08(04) Accountability Information
Control
Include in the system component inventory information, a means for identifying by [Selection(one-or-more): name; position; role] , individuals responsible and accountable for administering those components.
Discussion
Identifying individuals who are responsible and accountable for administering system components ensures that the assigned components are properly administered and that organizations can contact those individuals if some action is required (e.g., when the component is determined to be the source of a breach, needs to be recalled or replaced, or needs to be relocated).
Assessment Objective
individuals responsible and accountable for administering system components are identified by [Selection(one-or-more): name; position; role] in the system component inventory.
Assessment Method
Examine
Configuration management policy
procedures addressing system component inventory
configuration management plan
system security plan
system component inventory
system security plan
other relevant documents or records
Interview
Organizational personnel with component inventory management responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|