FBI CJIS Security Policy
CM: Configuration Management – FBI CJIS Security Policy

FBI CJIS Security Policy CM-8(3): System Component Inventory | Automated Unauthorized Component Detection

What does CM-8(3) require?

Detect unauthorised hardware, software and firmware components with automated mechanisms continuously or at least weekly, and when found disable or isolate them and notify personnel with security responsibilities.

Maintained by Gerard BlokdykControl text last updated

Other controls in CM: Configuration Management – FBI CJIS Security Policy

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.