Under active development Content is continuously updated and improved

ID.AM-08Systems, hardware, software, services, and data are managed throughout their life cycles

>Control Description

This asset management subcategory ensures that systems, hardware, software, services, and data are managed throughout their life cycles. Key activities include: Integrate cybersecurity considerations throughout the life cycles of systems, hardware, software, and services; Integrate cybersecurity considerations into product life cycles; Identify unofficial uses of technology to meet mission objectives (i.

>Cross-Framework Mappings

>Informative References

Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0

CCMv4.0

AIS-02
AIS-04
AIS-05
AIS-06
AIS-07
CCC-04
CEK-14
CEK-21
+16 more

CIS Controls v8.0

1.1
3.5

CIS Controls v8.1

1.1
3.5

CRI Profile v2.0

ID.AM-08
ID.AM-08.01
ID.AM-08.02
ID.AM-08.03
ID.AM-08.04
ID.AM-08.05
ID.AM-08.06

CSF v1.1

PR.DS-3
PR.IP-2
PR.MA-1
PR.MA-2
PR.IP-6
PR.DS

ISO/IEC 27001:2022

Mandatory Clause: None
Annex A Controls: 5.8
Annex A Controls: 5.9
Annex A Controls: 5.12
Annex A Controls: 5.13
Annex A Controls: 5.19
Annex A Controls: 5.22
Annex A Controls: 7.10
+2 more

NICE Framework

DD-WRL-002
DD-WRL-003
DD-WRL-004
IO-WRL-001
IO-WRL-002
IO-WRL-003
IO-WRL-004
IO-WRL-005
+1 more

PCI DSS

6.2.2
6.2.1
6.2.3
6.2.3.1
6.2.4
6.3.1
6.3.3
12.3.4
+1 more

SCF

AST-01
DCH-01
DCH-01.1
PRM-07
SEA-07
SEA-07.1

SP 800-171 Rev 3

03.14.08
03.15.02
03.16.01
03.16.02
03.17.02

SP 800-218

PW.4.1
PW.4.4

SP 800-221A

MA.RI-1

SP 800-53 Rev 5.1.1

CM-09
CM-13
MA-02
MA-06
PL-02
PM-22
PM-23
SA-03
+7 more

SP 800-53 Rev 5.2.0

CM-09
CM-13
MA-02
MA-06
PL-02
PM-22
PM-23
SA-03
+7 more

SP-800-37 Rev 2

RMF Prepare Step (System Level): TASK P-10 Asset Identification
RMF Prepare Step (System Level): TASK P-12 Information Types
RMF Prepare Step (System Level): TASK P-13 Information Life Cycle
RMF Monitor Step: TASK M-7 System Disposal

Ask AI

Configure your API key to use AI features.