CM-8(9): Assignment of Components to Systems

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

  1. Assign system components to a system; and
  2. Receive an acknowledgement from [Assignment: organization-defined personnel or roles] of this assignment.

Supplemental Guidance

System components that are not assigned to a system may be unmanaged, lack the required protection, and become an organizational vulnerability.