Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> CM-7 (5) What is the solution and how is it implemented? Part a Part c CM-8 Information System Component Inventory The organization: Develops and documents an inventory of information system components that: Accurately reflects the current information system; Includes all components within the authorization boundary of the information system; Is at the level of granularity deemed necessary for tracking and reporting; and Includes [DoD Assignment: hardware inventory specifications (manufacturer, type, model, serial number, physical location), software license information, information system/component owner, and for a networked component/device, the machine name]; and CM-8 Control Summary Information Responsible Role: Parameter CM-8(a)(4): Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned
Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of PA> CM-7 (5) What is the solution and how is it implemented? Part a Part c CM-8 Information System Component Inventory The organization: Develops and documents an inventory of information system components that: Accurately reflects the current information system; Includes all components within the authorization boundary of the information system; Is at the level of granularity deemed necessary for tracking and reporting; and Includes [DoD Assignment: hardware inventory specifications (manufacturer, type, model, serial number, physical location), software license information, information system/component owner, and for a networked component/device, the machine name]; and CM-8 Control Summary Information Responsible Role: Parameter CM-8(a)(4): Implementation Status (check all that apply): Implemented Partially implemented Not implemented – risk acceptance sought Planned