id: "CM-08(02)" title: "Automated Maintenance" family: "CM" family_name: "Configuration Management" sort_id: "cm-08.02" priority: "P1" implementation_level: "organization" parent: "CM-08" enhancement: True
Statement
Maintain the currency, completeness, accuracy, and availability of the inventory of system components using {{ insert: param, cm-8.2_prm_1 }}.
Guidance
Organizations maintain system inventories to the extent feasible. For example, virtual machines can be difficult to monitor because such machines are not visible to the network when not in use. In such cases, organizations maintain as up-to-date, complete, and accurate an inventory as is deemed reasonable. Automated maintenance can be achieved by the implementation of CM-2(2) for organizations that combine system component inventory and baseline configuration activities.
Assessment Objective: {{ insert: param, cm-08.02_odp.01 }} are used to maintain the currency of the system component inventory;
Assessment Objective: {{ insert: param, cm-08.02_odp.02 }} are used to maintain the completeness of the system component inventory;
Assessment Objective: {{ insert: param, cm-08.02_odp.03 }} are used to maintain the accuracy of the system component inventory;
Assessment Objective: {{ insert: param, cm-08.02_odp.04 }} are used to maintain the availability of the system component inventory.
Configuration management policy
procedures addressing system component inventory
configuration management plan
system design documentation
system security plan
system component inventory
change control records
system maintenance records
system audit records
system security plan
other relevant documents or records
Organizational personnel with component inventory management responsibilities
organizational personnel with information security responsibilities
system/network administrators
system developers
Organizational processes for maintaining the system component inventory
automated mechanisms supporting and/or implementing the system component inventory