Back

Record the deployment environment for applicable assets in the asset inventory.


CONTROL ID
06637
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Establish and maintain a detailed inventory of all licensed software installed on enterprise assets. The software inventory must document the title, publisher, initial install/use date, and business purpose for each entry; where appropriate, include the Uniform Resource Locator (URL), app store(s), … (CIS Control 2: Safeguard 2.1 Establish and Maintain a Software Inventory, CIS Controls, V8)
  • Does the inventory system contain a field for the environment (development, testing, etc)? (ยง D.1.1.6, Shared Assessments Standardized Information Gathering Questionnaire - D. Asset Management, 7.0)
  • For lab tested systems ensure this requirement is addressed in the pm's deployment plan. (COSP-1, DoD Instruction 8500.2 Information Assurance (IA) Implementation)