Skip to content

Configuration Management Database (CMDB)

What is Configuration Management Database (CMDB)?

A repository that stores information about the configuration items (CIs) and their relationships within an IT environment. CMDBs support change management, incident management, and compliance reporting.

Governance

Terms that appear alongside configuration management database (cmdb)

Each of these is named in at least one of the same controls as configuration management database (cmdb). The number is how many controls name both.

Frameworks that govern configuration management database (cmdb)

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on configuration management database (cmdb)

Requirements naming configuration management database (cmdb) across 6 standards, quoted from the control text.

ISMAP (Japan)1 control

ISMAP Cloud Operations covers the day-to-day security operations of cloud services. (1) Cloud Security Monitoring and Logging: 24x7 Security Operations Center (SOC) + SIEM Security Information and Event Management (Splunk + Microsoft Sentinel + IBM QRadar + Su...

ISMAP-CloudOperations-Monitoring-Logging-IncidentResponse-NISC-Reporting-Vulnerability-Change-SLA · ISMAP Cloud Operations - Security Monitoring + SIEM + Logging + Incident Response + NISC Reporting + Vulnerability Management + Penetration Testing + Change Management + SLA Management →
Kuwait National Cybersecurity Framework1 control

Kuwait NCF Identify function. Asset Identification and Classification: comprehensive Configuration Management Database (CMDB) covering hardware + software + data + cloud assets + IoT + OT/ICS + virtual + container + identity + business processes + suppliers.

KNCF-Identify-Asset-Risk-Management-CMDB-Classification-Crown-Jewels-CNI-NCSC-Sector-Designation · Kuwait NCF Identify + Asset Management + Risk + CNI + Crown Jewels →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds of London Minimum Standards 11 (MS11) - Cyber Security developed by Lloyds Performance Management Directorate (PMD) within Society of Lloyds + applicable to all Lloyds managing agents + syndicates + members agents + service companies + Lloyds Insurance...

LLOYDS-MS11-Governance-Board-Oversight-Risk-Identification-Assessment-Asset-Inventory-MS11-1-2-3-Lloyds-PMD · Lloyds MS11 Governance + Board Oversight + Risk + Asset Inventory + MS11.1-3 →
MITRE D3FEND1 control

Apply D3FEND MODEL tactic - establishing the digital domain that the defender intends to defend. D3-AM Asset Inventory + D3-NM Network Mapping + D3-ID Identity Discovery + D3-NM-AM Asset Mapping + D3-SI System Inventory + D3-UA User Account Inventory + D3-SWI...

MITRE-D3FEND-Model-Tactic-System-Inventory-Network-Mapping-Identity-Discovery-Asset-Identification · MITRE D3FEND Model Tactic + System Inventory + Network Mapping + Identity Discovery + Asset Identification →
Monetary Authority of Singapore Technology Risk Management Guidelines1 control

Implement Technology Risk Governance + Technology Risk Management Framework + Information Asset Management per MAS TRM Chapters 2 + 3 + 5.

MAS-TRM-Governance-Chapters-2-3-Board-Senior-Management-Risk-Framework-Information-Asset-Management · MAS TRM Governance + Chapters 2-3 + Board + Senior Management + Risk Framework + Information Asset Management →
NIST SP 800-1371 control

Monitor vulnerability per Section 4.1 continuously: scanning + assessment + risk prioritisation + remediation tracking aligned with NIST SP 800-40 + NIST SP 800-126 SCAP + Tenable + Qualys + Rapid7 + open-source OpenVAS.

NISTSP137-5 · Vulnerability + Patch + Configuration Status Monitoring →

Questions people ask about configuration management database (cmdb)

What is Configuration Management Database (CMDB)?
A repository that stores information about the configuration items (CIs) and their relationships within an IT environment. CMDBs support change management, incident management, and compliance reporting.
Why is Configuration Management Database (CMDB) important for compliance?
Configuration Management Database (CMDB) is a key concept in Governance. Understanding configuration management database (cmdb) helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Configuration Management Database (CMDB)?
Configuration Management Database (CMDB) appears in the requirement text of ISMAP (Japan), Kuwait National Cybersecurity Framework, Lloyd's Minimum Standards - Cyber Security, MITRE D3FEND, Monetary Authority of Singapore Technology Risk Management Guidelines. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Configuration Management Database (CMDB)?
Explore our compliance framework pages to see how configuration management database (cmdb) applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Configuration Management Database (CMDB) applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.