ID.AM-02 Inventories of software, services, and systems managed by the organization are maintained

Statement

Inventories of software, services, and systems managed by the organization are maintained

Guidance

Maintain inventories for all types of software and services, including commercial-off-the-shelf, open-source, custom applications, API services, and cloud-based applications and services

Guidance

Constantly monitor all platforms, including containers and virtual machines, for software and service inventory changes

Guidance

Maintain an inventory of the organization's systems

1. Overview

1.1 References

• 12.4 Asset inventory

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final