Requirement:

The asset owner shall have policies and procedures to document, verify and maintain, throughout the full life cycle of the IACS, the inventory baseline of all devices, hardware components, software components, communications protocols and open communications ports used in the IACS to include, but are not limited to: a) organizational responsibilities, b) manufacturer, c) model, d) version numbers, e) serial numbers, f) network interfaces, g) communication addresses, h) revision/patch levels, and i) history.

Guidance: