PM-5 Information System Inventory
Description
This Control addresses the inventory requirements in FISMA.
OMB provides guidance on developing information systems inventories and associated reporting requirements. For specific information system inventory reporting requirements, organizations consult OMB annual FISMA reporting guidance.
Applicability
The authority and responsibility regarding the university’s compliance with Texas Administrative Code, Chapter 202 [TAC 202] have been delegated by the President to the Chief Information Officer (CIO).
Implementation
TAMU-CC develops and maintains an inventory of its information systems, as follows:
- Designates a single system of record for inventory of all information systems owned or managed by the member;
- Includes any cloud computing services [SP 800-145] operated by the member in its inventory of information systems, and
- Designates which data regarding an information system to record in the inventory of information systems. At a minimum, the data includes a unique identifier (e.g., serial number or system name), owner, custodian, and highest level of data classification stored/processed on the information system.
Revision History
Last Updated: February 21, 2025
Previous Versions:
- June 29, 2023
- May 31, 2022
- March 25, 2021
- September 16, 2019