Assessment Objective
Determine if:
- PM-05[01] an inventory of organizational systems is developed;
- PM-05[02] the inventory of organizational systems is updated [Assignment: frequency].
Assessment Methods
Examine
- Information security program plan
- system inventory
- procedures addressing system inventory development and maintenance
- OMB FISMA reporting guidance
- other relevant documents or records
Interview
- Organizational personnel with information security program planning and plan implementation responsibilities
- organizational personnel responsible for developing and maintaining the system inventory
- organizational personnel with information security responsibilities
Test
- Organizational processes for system inventory development and maintenance
- mechanisms supporting the system inventory
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PM-05 System Inventory |