Under OMB guidance issued within 90 days, agencies inventory all their major information systems and provide the inventory to CISA, the Department of Defense or the National Manager as applicable, each of which keeps a registry of agency inventories and shares it to find gaps or overlaps in oversight coverage. The guidance does not apply to elements of the Intelligence Community.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.