CM-8 (4) - Accountability Information
Control requirements
CM-8 (4) - 0
Include in the system component inventory information, a means for identifying by [IBM Assignment: asset owner/custodian], individuals responsible and accountable for administering those components.
NIST supplemental guidance
Identifying individuals who are responsible and accountable for administering system components ensures that the assigned components are properly administered and that organizations can contact those individuals if some action is required (e.g., when the component is determined to be the source of a breach, needs to be recalled or replaced, or needs to be relocated).