NIST SP 800-53 Rev. 5
CM-12
Configuration Management

Information Location

Description

a. Identify and document the location of [organization-defined parameter] and the specific system components on which the information is processed and stored; b. Identify and document the users who have access to the system and system components where the information is processed and stored; and c. Document changes to the location (i.e., system or system components) where the information is processed and stored.

Mapped SPARTA techniques

72 techniques

Cite as SafeMode Space, nist-80053-rev5 CM-12.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.