CIS-8.1.2.1 — Establish and Maintain a Software InventoryDomain: CIS Control 2 | Safeguard: CIS-8.1.2.1 | Asset Class: Software | Security Function: Identify | Source: CIS Controls v8.1.2 (March 2025) |
Implementation Groups: IG1IG2IG3 Establish and maintain a detailed inventory of all licensed software installed on enterprise assets. |
Executive Summary (For Leadership and the Board)
CIS Safeguard CIS-8.1.2.1 sits inside Control 2 (Software / Identify). Mature programs treat this as a measured, recertified, and audit-evidenced control. The Safeguard maps to NIST SP 800-53 Rev. 5 CM-7, CM-10/11, SI-7 and to NIST CSF 2.0 ID.AM, PR.PS.
Tags: CIS-8.1.2.1, cis-controls, cis-v8-1, ig3, control-2, asset-class-software, function-identify