Control statement
a. Develop and document an inventory of system components that:
1. Accurately reflects the system;
2. Includes all components within the system;
3. Does not include duplicate accounting of components or components assigned to any other system;
4. Is at the level of granularity deemed necessary for tracking and reporting; and
5. Includes the following information to achieve system component accountability: {{ insert: param, cm-08_odp.01 }} ; and
b. Review and update the system component inventory {{ insert: param, cm-08_odp.02 }}.
Requirement: must be provided at least monthly or when there is a change. Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-PIY-01 | Automated Inventory Use authoritative sources to automatically generate real-time inventories of all information resources when needed. | Policy and Inventory |