CM-8
System Component Inventory
Control text
The control number, title and every cross-reference on this page are public. The official control text is available to signed-in users.
Create a free account or log in to read the full text of CM-8 (requirement, discussion, assessment objective).
Related controls
Other reference-standard controls mapped to this one, each with the owner's words for the relationship and the official document that states it.
- 03.04.10System Component Inventory
“Source control” about 03.04.10 · NIST SP 800-171 Rev 3 (OSCAL), control 03.04.10 link rel=reference (CM-08)
- 3.4.1e
“Appendix C mapping” · NIST SP 800-172 (Feb 2021), p.66 Appendix C
- 3.11.4e
“Appendix C mapping” · NIST SP 800-172 (Feb 2021), p.73 Appendix C
- CM-8INFORMATION SYSTEM COMPONENT INVENTORY
“Adds control text Changes discussion” about CM-8 (Rev 4) · NIST SP 800-53 Rev 4 → Rev 5 comparison, sheet "Rev4 Rev5 Compared" row 312
- CM-8(5)No Duplicate Accounting of Components
“Incorporated into” about CM-8(5) · NIST SP 800-53 Rev 5 (OSCAL, release 5.2.0), control CM-8(5) link rel=incorporated-into
- RA-5(7)Automated Detection and Notification of Unauthorized Components
“Incorporated into” about RA-5(7) · NIST SP 800-53 Rev 5 (OSCAL, release 5.2.0), control RA-5(7) link rel=incorporated-into
Source: NIST · https://csrc.nist.gov/pubs/sp/800/53/r5/final