NIST 800-53 REV 5 • CONFIGURATION MANAGEMENT
CM-8(9) — Assignment of Components to Systems
Assign system components to a system; and Receive an acknowledgement from {{ insert: param, cm-08.09_odp }} of this assignment.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
System components that are not assigned to a system may be unmanaged, lack the required protection, and become an organizational vulnerability.
Practitioner Notes
This enhancement requires that every component be assigned to a specific system — no orphaned assets floating around without a designated system owner.
Example 1: During your quarterly inventory review, run a report from your CMDB to identify any assets not assigned to a system boundary and work with asset owners to resolve them.
Example 2: In your Azure environment, use resource groups and management groups to ensure every resource is organized under a system and tagged with the system name.