ComplianceNIST 800-53 enhancement

NIST-CM-8(4) Accountability Information

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CM Configuration Management
Control
CM-8(4)

Control statement

Include in the system component inventory information, a means for identifying by [Selection (one or more of): name; position; role] , individuals responsible and accountable for administering those components.

Discussion

Identifying individuals who are responsible and accountable for administering system components ensures that the assigned components are properly administered and that organizations can contact those individuals if some action is required (e.g., when the component is determined to be the source of a breach, needs to be recalled or replaced, or needs to be relocated).

Related

Enhancement of · Compliance (1)

  • NIST-CM-8 System Component Inventory NIST 800-53 control

Related control · Compliance (1)

  • NIST-AC-3 Access Enforcement NIST 800-53 control