CM-8(9): Assignment Of Components To Systems
Control Family:
Parent Control:
Baselines:
(Not part of any baseline)
Next Version:
- NIST Special Publication 800-53 Revision 5:
- CM-8(9): Assignment of Components to Systems
Control Statement
The organization:
- Assigns [Assignment: organization-defined acquired information system components] to an information system; and
- Receives an acknowledgement from the information system owner of this assignment.
Supplemental Guidance
Organizations determine the criteria for or types of information system components (e.g., microprocessors, motherboards, software, programmable logic controllers, and network devices) that are subject to this control enhancement.