NIST 800-53 REV 5 • CONFIGURATION MANAGEMENT
CM-8(8) — Automated Location Tracking
Support the tracking of system components by geographic location using {{ insert: param, cm-08.08_odp }}.
CMMC Practice Mapping
No direct CMMC mapping
NIST 800-171 Mapping
No direct NIST 800-171 mapping
Related Controls
No related controls listed
Supplemental Guidance
The use of automated mechanisms to track the location of system components can increase the accuracy of component inventories. Such capability may help organizations rapidly identify the location and responsible individuals of system components that have been compromised, breached, or are otherwise in need of mitigation actions. The use of tracking mechanisms can be coordinated with senior agency officials for privacy if there are implications that affect individual privacy.
Practitioner Notes
This enhancement requires automated tracking of component locations — knowing not just what you have, but where it is physically or logically located.
Example 1: Use Intune device compliance policies to track the last check-in location and network of managed devices, flagging devices that appear in unexpected locations.
Example 2: For data center equipment, maintain rack location data in your CMDB with barcode or RFID tracking to verify physical location during audits.