FedRAMP Controls / CM

CM-12 Information Location

Family CM
Baselines moderate
Mapped KSIs 1

Control statement

a. Identify and document the location of {{ insert: param, cm-12_odp }} and the specific system components on which the information is processed and stored;
    b. Identify and document the users who have access to the system and system components where the information is processed and stored; and
    c. Document changes to the location (i.e., system or system components) where the information is processed and stored.
        Requirement: According to FedRAMP Authorization Boundary Guidance

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-PIY-01Automated Inventory
Use authoritative sources to automatically generate real-time inventories of all information resources when needed.
Policy and Inventory