CMMCDocs.comHome / Glossary / Asset Inventory
Asset Inventory
Also known as: System inventory
A complete list of in-scope hardware, software, and services categorized by their role in the CMMC scope. A required artifact for assessment.
An asset inventory is a complete, current list of all hardware, software, and services within the contractor's CMMC Level 2 scope. Each asset is categorized as Information System (IS), Security Protection Asset (SPA), Contractor Risk Managed Asset (CRMA), Out-of-Scope (OOS), or Specialized Asset.
The inventory typically includes: asset name or identifier, asset type, owner, location, operating system or platform, version, scope category, in-scope justification, and date of last update. Many contractors maintain it in a CMDB or asset management tool; smaller contractors track it in a spreadsheet.
A C3PAO will compare the asset inventory against the network diagram and the SSP to verify consistency.
Stop Googling. Start working.
CMMCDocs has all 110 NIST SP 800-171 Rev 2 requirements built in — with the language, the templates, and the evidence vault you need. Spin up a free demo workspace and click around the way an assessor would.
Get my demo account