CM-8 (6) Information System Component Inventory | Assessed Configurations / Approved Deviations
The organization includes assessed component configurations and any approved deviations to current deployed configurations in the information system component inventory.
Applicable CNSSI 1253 Baselines
Confidentiality
- L
- M
- H
Integrity
- L
- M
- H
Availability
- L
- M
- H
Supplemental Guidance
This control enhancement focuses on configuration settings established by organizations for information system components, the specific components that have been assessed to determine compliance with the required configuration settings, and any approved deviations from established configuration settings.