>myctrl.tools
Preferences
Under active development — Content is continuously updated and improved
Compare

CM-8(9)—Information System Component Inventory

Operational

>Control Description

INFORMATION SYSTEM COMPONENT INVENTORY | ASSIGNMENT OF COMPONENTS TO SYSTEMS (a) The organization assigns ⚙organization-defined acquired information system components to an information system; and (b) The organization receives an acknowledgement from the information system owner of this assignment.

>Supplemental Guidance

Organizations determine the criteria for or types of information system components (e.g., microprocessors, motherboards, software, programmable logic controllers, and network devices) that are subject to this control enhancement. Related control: SA-4.

Ask AI

Configure your API key to use AI features.