Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

CM-8(7)Centralized Repository

>Control Description

Enterprises may choose to implement centralized inventories that include components from all enterprise information systems, networks, and their components. Centralized repositories of inventories provide opportunities for efficiencies in accounting for information systems, networks, and their components. Such repositories may also help enterprises rapidly identify the location and responsible individuals of components that have been compromised, breached, or are otherwise in need of mitigation actions. The enterprise should ensure that centralized inventories include the supply chain-specific information required for proper component accountability (e.g., supply chain relevance and information system, network, or component owner).

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.