ID.AM-08 Systems, hardware, software, services, and data are managed throughout their life cycles

Statement

Systems, hardware, software, services, and data are managed throughout their life cycles

Example

Integrate cybersecurity considerations throughout the life cycles of systems, hardware, software, and services

Example

Integrate cybersecurity considerations into product life cycles

Example

Identify unofficial uses of technology to meet mission objectives (i.e., shadow IT)

Example

Periodically identify redundant systems, hardware, software, and services that unnecessarily increase the organization's attack surface

Example

Properly configure and secure systems, hardware, software, and services prior to their deployment in production

Example

Update inventories when systems, hardware, software, and services are moved or transferred within the organization

Example

Securely destroy stored data based on the organization's data retention policy using the prescribed destruction method, and keep and manage a record of the destructions

Example

Securely sanitize data storage when hardware is being retired, decommissioned, reassigned, or sent for repairs or replacement

Example

Offer methods for destroying paper, storage media, and other physical forms of data storage

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final