+CM-08(09) Assignment of Components to Systems
|
CM-08(09) Assignment of Components to Systems
Control
- Assign system components to a system; and
- Receive an acknowledgement from [Assignement: personnel or roles] of this assignment.
Discussion
System components that are not assigned to a system may be unmanaged, lack the required protection, and become an organizational vulnerability.
Assessment Objective
- system components are assigned to a system;
- an acknowledgement of the component assignment is received from [Assignement: personnel or roles].
Assessment Method
Examine
Configuration management policy
procedures addressing system component inventory
configuration management plan
system security plan
system design documentation
system component inventory
change control records
acknowledgements of system component assignments
system security plan
other relevant documents or records
Interview
Organizational personnel with component inventory management responsibilities
system owner
organizational personnel with information security responsibilities
system/network administrators
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|