PM-5

Requirement

Develop and update [Assignment: organization-defined frequency] an inventory of organizational systems.

Discussion

OMB A-130 provides guidance on developing systems inventories and associated reporting requirements. System inventory refers to an organization-wide inventory of systems, not system components as described in CM-8.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Information security program plan; system inventory; procedures addressing system inventory development and maintenance; OMB FISMA reporting guidance; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with information security program planning and plan implementation responsibilities; organizational personnel responsible for developing and maintaining the system inventory; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for system inventory development and maintenance; mechanisms supporting the system inventory].

ID	Assessment Objectives
PM-05[02]	the inventory of organizational systems is updated <PM-05_ODP frequency>.
PM-05[01]	an inventory of organizational systems is developed;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!