FedRAMP Controls / CM
CM-12(1) Automated Tools to Support Information Location
Family CM
Baselines moderate
Mapped KSIs 2
Control statement
Use automated tools to identify {{ insert: param, cm-12.01_odp.01 }} on {{ insert: param, cm-12.01_odp.02 }} to ensure controls are in place to protect organizational information and individual privacy.
Requirement: According to FedRAMP Authorization Boundary Guidance. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-PIY-01 | Automated Inventory Use authoritative sources to automatically generate real-time inventories of all information resources when needed. | Policy and Inventory |
| KSI-SVC-01 | Continuous Improvement Implement improvements based on persistent evaluation of information resources for opportunities to improve security. | Service Configuration |