NIST 800-53 REV 5 • CONFIGURATION MANAGEMENT
CM-8(5) — No Duplicate Accounting of Components
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Practitioner Notes
This enhancement prevents the same component from being counted in multiple systems' inventories — each component should belong to exactly one system boundary.
Example 1: In eMASS or your GRC tool, validate that each asset is assigned to only one authorization boundary and not listed as part of multiple systems.
Example 2: Run quarterly reports from your CMDB to identify any assets assigned to multiple system records and resolve the ownership conflicts.