id: "CM-08(09)" title: "Assignment of Components to Systems" family: "CM" family_name: "Configuration Management" sort_id: "cm-08.09" priority: "P1" implementation_level: "organization" parent: "CM-08" enhancement: True
Assign system components to a system; and
Receive an acknowledgement from {{ insert: param, cm-08.09_odp }} of this assignment.
Guidance
System components that are not assigned to a system may be unmanaged, lack the required protection, and become an organizational vulnerability.
Assessment Objective: system components are assigned to a system;
Assessment Objective: an acknowledgement of the component assignment is received from {{ insert: param, cm-08.09_odp }}.
Configuration management policy
procedures addressing system component inventory
configuration management plan
system security plan
system design documentation
system component inventory
change control records
acknowledgements of system component assignments
system security plan
other relevant documents or records
Organizational personnel with component inventory management responsibilities
system owner
organizational personnel with information security responsibilities
system/network administrators
Organizational processes for assigning components to systems
organizational processes for acknowledging assignment of components to systems
mechanisms implementing assignment of components to the system
mechanisms implementing acknowledgment of assignment of components to the system