CM-8(2): Automated Maintenance

Control Family:

Configuration Management

Parent Control:

CM-8: Information System Component Inventory

Priority:

CSF v1.1 References:

Baselines:

  • High

Next Version:

Control Statement

The organization employs automated mechanisms to help maintain an up-to-date, complete, accurate, and readily available inventory of information system components.

Supplemental Guidance

Organizations maintain information system inventories to the extent feasible. Virtual machines, for example, can be difficult to monitor because such machines are not visible to the network when not in use. In such cases, organizations maintain as up-to-date, complete, and accurate an inventory as is deemed reasonable. This control enhancement can be satisfied by the implementation of CM-2 (2) for organizations that choose to combine information system component inventory and baseline configuration activities.

Related Controls

Critical Security Controls Version 7.1