NIST 800-53 REV 5 • CONFIGURATION MANAGEMENT
CM-8(1) — Updates During Installation and Removal
Update the inventory of system components as part of component installations, removals, and system updates.
CMMC Practice Mapping
Related Controls
Supplemental Guidance
Organizations can improve the accuracy, completeness, and consistency of system component inventories if the inventories are updated as part of component installations or removals or during general system updates. If inventories are not updated at these key times, there is a greater likelihood that the information will not be appropriately captured and documented. System updates include hardware, software, and firmware components.
Practitioner Notes
This enhancement requires you to update your inventory whenever new components are installed or existing ones are removed — not just during periodic reviews.
Example 1: Configure Intune auto-enrollment so that when a new device joins your network, it automatically appears in your asset inventory with its hardware and software details.
Example 2: Include inventory update steps in your ServiceNow change management workflow so that installing or removing hardware automatically triggers a CMDB update.