+CM-08(01) [H] Updates During Installation and Removal
|
CM-08(01) [H] Updates During Installation and Removal
Control
Update the inventory of system components as part of component installations, removals, and system updates.
Discussion
Organizations can improve the accuracy, completeness, and consistency of system component inventories if the inventories are updated as part of component installations or removals or during general system updates. If inventories are not updated at these key times, there is a greater likelihood that the information will not be appropriately captured and documented. System updates include hardware, software, and firmware components.
Assessment Objective
- the inventory of system components is updated as part of component installations;
- the inventory of system components is updated as part of component removals;
- the inventory of system components is updated as part of system updates.
Assessment Method
Examine
Configuration management policy
procedures addressing system component inventory
configuration management plan
system security plan
system component inventory
inventory reviews and update records
change control records
component installation records
component removal records
system security plan
other relevant documents or records
Interview
Organizational personnel with component inventory updating responsibilities
organizational personnel with information security responsibilities
system/network administrators
1. Apžvalga
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
| Šaltinis |
Reikalavimas |
3. Susiję teisės aktai
Teisės aktai
| Šaltinis |
Reguliavimas |
Susietos užduotys
|