Content
16 CFR 314.4 [GLBA ‘Standards for Safeguarding Customer Information’ Relevant]
Control Requirements for High Systems (H)
CSF: IDENTIFY, PROTECT
CSF Subcategories: ID.AM‑01 ID.AM‑02 PR. IP‑01
- Components of systems that are in-scope for Change and Configuration Management must be accurately documented in the inventory and configuration management system established by ITS. The assigned system administrators are responsible for entering the inventory data and maintaining accurate entries in the system. The inventory listing must be updated as an integral part of component installations, removals, and system updates. [CM-8(1)]
- CUI Only: The CUI environment must be monitored for component changes. If unauthorized hardware, software, and firmware is detected it must immediately be isolated and network access disabled pending Enterprise Cybersecurity investigation. [CM-8(3)]
- item 1
- item 2
- item 3
Important
don’t do this
Box 1
content
Box 2
content
Box 3
Subheading
Title
content that is not seen until clicked on