+CM-08(02) Automated Maintenance
|
CM-08(02) Automated Maintenance
Control
Maintain the currency, completeness, accuracy, and availability of the inventory of system components using [Assignement: organization-defined automated mechanisms].
Discussion
Organizations maintain system inventories to the extent feasible. For example, virtual machines can be difficult to monitor because such machines are not visible to the network when not in use. In such cases, organizations maintain as up-to-date, complete, and accurate an inventory as is deemed reasonable. Automated maintenance can be achieved by the implementation of [CM-2(2)](#cm-2.2) for organizations that combine system component inventory and baseline configuration activities.
Assessment Objective
- [Assignement: automated mechanisms] are used to maintain the currency of the system component inventory;
- [Assignement: automated mechanisms] are used to maintain the completeness of the system component inventory;
- [Assignement: automated mechanisms] are used to maintain the accuracy of the system component inventory;
- [Assignement: automated mechanisms] are used to maintain the availability of the system component inventory.
Assessment Method
Examine
Configuration management policy
procedures addressing system component inventory
configuration management plan
system design documentation
system security plan
system component inventory
change control records
system maintenance records
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with component inventory management responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|