Benchmark: System Component Inventory (CM-8)
Description
The organization develops and documents an inventory of information system components that accurately reflects the current information system, includes all components within the authorization boundary of the information system, is at the level of granularity deemed necessary for tracking and reporting and reviews and updates the information system component inventory.
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-aws-compliance
Start the Powerpipe server:
steampipe service startpowerpipe server
Open http://localhost:9033 in your browser and select System Component Inventory (CM-8).
Run this benchmark in your terminal:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_cm_8
Snapshot and share results via Turbot Pipes:
powerpipe benchmark run aws_compliance.benchmark.nist_800_53_rev_5_cm_8 --share
Benchmarks
- CM-8(1) Updates During Installation And Removals
- CM-8(2) Automated Maintenance
- CM-8(3) Automated Unauthorized Component Detection
- CM-8(6) Assessed Configurations And Approved Deviations
- CM-8(a)
- CM-8(b)