ID.AM-08 Systems, hardware, software, services, and data are managed throughout their life cycles

Statement

Systems, hardware, software, services, and data are managed throughout their life cycles

Guidance

Integrate cybersecurity considerations throughout the life cycles of systems, hardware, software, and services

Guidance

Integrate cybersecurity considerations into product life cycles

Guidance

Identify unofficial uses of technology to meet mission objectives (i.e., shadow IT)

Guidance

Periodically identify redundant systems, hardware, software, and services that unnecessarily increase the organization's attack surface

Guidance

Properly configure and secure systems, hardware, software, and services prior to their deployment in production

Guidance

Update inventories when systems, hardware, software, and services are moved or transferred within the organization

Guidance

Securely destroy stored data based on the organization's data retention policy using the prescribed destruction method, and keep and manage a record of the destructions

Guidance

Securely sanitize data storage when hardware is being retired, decommissioned, reassigned, or sent for repairs or replacement

Guidance

Offer methods for destroying paper, storage media, and other physical forms of data storage

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final