CM-8(5): No Duplicate Accounting Of Components

Control Family:

Configuration Management

Parent Control:

CM-8: Information System Component Inventory

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.AM-1
ID.AM-2
PR.DS-3
DE.CM-7

Baselines:

Moderate
High

Control is withdrawn in the next version of this control set and incorporated into: CM-8: System Component Inventory.

Control Statement

The organization verifies that all components within the authorization boundary of the information system are not duplicated in other information system component inventories.

Supplemental Guidance

This control enhancement addresses the potential problem of duplicate accounting of information system components in large or complex interconnected systems.