id: "PM-05" title: "System Inventory" family: "PM" family_name: "Program Management" sort_id: "pm-05" priority: "P1" implementation_level: "organization" enhancements: - pm-5.1
Statement
Develop and update {{ insert: param, pm-05_odp }} an inventory of organizational systems.
Guidance
OMB A-130 provides guidance on developing systems inventories and associated reporting requirements. System inventory refers to an organization-wide inventory of systems, not system components as described in CM-8.
Assessment Objective: an inventory of organizational systems is developed;
Assessment Objective: the inventory of organizational systems is updated {{ insert: param, pm-05_odp }}.
Information security program plan
system inventory
procedures addressing system inventory development and maintenance
OMB FISMA reporting guidance
other relevant documents or records
Organizational personnel with information security program planning and plan implementation responsibilities
organizational personnel responsible for developing and maintaining the system inventory
organizational personnel with information security responsibilities
Organizational processes for system inventory development and maintenance
mechanisms supporting the system inventory