PM-5: System Inventory
Control Family:
Baselines:
- Low
N/A
- Moderate
N/A
- High
N/A
- Privacy
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- PM-5: Information System Inventory
Control Statement
Develop and update [Assignment: organization-defined frequency] an inventory of organizational systems.
Supplemental Guidance
OMB A-130 provides guidance on developing systems inventories and associated reporting requirements. System inventory refers to an organization-wide inventory of systems, not system components as described in CM-8.
Control Enhancements
PM-5(1): Inventory of Personally Identifiable Information
Baseline(s):
- Privacy
Establish, maintain, and update [Assignment: organization-defined frequency] an inventory of all systems, applications, and projects that process personally identifiable information.