id: "CM-12(01)" title: "Automated Tools to Support Information Location" family: "CM" family_name: "Configuration Management" sort_id: "cm-12.01" priority: "P1" implementation_level: "organization" parent: "CM-12" enhancement: True
Statement
Use automated tools to identify {{ insert: param, cm-12.01_odp.01 }} on {{ insert: param, cm-12.01_odp.02 }} to ensure controls are in place to protect organizational information and individual privacy.
Guidance
The use of automated tools helps to increase the effectiveness and efficiency of the information location capability implemented within the system. Automation also helps organizations manage the data produced during information location activities and share such information across the organization. The output of automated information location tools can be used to guide and inform system architecture and design decisions.
Assessment Objective
automated tools are used to identify {{ insert: param, cm-12.01_odp.01 }} on {{ insert: param, cm-12.01_odp.02 }} to ensure that controls are in place to protect organizational information and individual privacy.
Configuration management policy
procedures addressing identification and documentation of information location
configuration management plan
system design documentation
PII inventory documentation
data mapping documentation
change control records
system component inventory
system security plan
privacy plan
other relevant documents or records
Organizational personnel with responsibilities for managing information location
organizational personnel with information security responsibilities
system/network administrators
system developers
Organizational processes governing information location
automated mechanisms enforcing policies and methods for governing information location
automated tools used to identify information on system components