If individual organizations identify a NSS, who is going to maintain the comprehensive list or database?
No comprehensive list or database of NSS exists. However, it is recommended that individual organizations maintain a list or database of their own NSS. The Department of Defense (DoD) maintains a database called the DoD Information Technology (IT) Portfolio Repository (DIPTR) for collecting and maintaining DoD registry for FISMA, including identification of a system as a NSS.
Related Questions
- I currently maintain a comprehensive list of the hardware and software I own for insurance purposes. Do I need to also maintain this information in a separate Information Asset Register?
- Does the NICS maintain a database of medical records or information on an individuals mental health condition, diagnosis, or treatment?
- If individual organizations identify a NSS, who is going to maintain the comprehensive list or database?