id: "CM-08(01)" title: "Updates During Installation and Removal" family: "CM" family_name: "Configuration Management" sort_id: "cm-08.01" priority: "P1" implementation_level: "organization" parent: "CM-08" enhancement: True
Statement
Update the inventory of system components as part of component installations, removals, and system updates.
Guidance
Organizations can improve the accuracy, completeness, and consistency of system component inventories if the inventories are updated as part of component installations or removals or during general system updates. If inventories are not updated at these key times, there is a greater likelihood that the information will not be appropriately captured and documented. System updates include hardware, software, and firmware components.
Assessment Objective: the inventory of system components is updated as part of component installations;
Assessment Objective: the inventory of system components is updated as part of component removals;
Assessment Objective: the inventory of system components is updated as part of system updates.
Configuration management policy
procedures addressing system component inventory
configuration management plan
system security plan
system component inventory
inventory reviews and update records
change control records
component installation records
component removal records
system security plan
other relevant documents or records
Organizational personnel with component inventory updating responsibilities
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for updating the system component inventory
mechanisms supporting and/or implementing system component inventory updates