Inventory of Artefacts (CMDB)

[Pat-Duarte]

Where to best make explicit that we need a CMDB to support a number of our activities, such as updating and patching ? It might be a quality criterion.

History from old repo:
@Elointz reacted with thumbs up emoji
@23bartman assigned johndileo and itscooper on Jun 5, 2019
@SebaDele commented on Nov 23, 2019
consider as a common prerequisite as part of guidance/how-to?

@SebaDele SebaDele assigned 23bartman on Nov 23, 2019
@SebaDele SebaDele added the SAMM 2.0 label on Nov 23, 2019
@23bartman 23bartman assigned KGABSWEDEN on Dec 15, 2019
@stevespringett mentioned this issue 4 days ago
SBOM and OBOM question #579 (in old repo), current repo link: owaspsamm/samm-suite#105

[SebaDele]

look at similar models like BSIMM to see if there are potential aspects are missing.
this is input for future evolutions of the SAMM model.
we should structure this

[johndileo]

This is a good opportunity for a Guidance page - "Where does a CMDB fit in?"

This page can cover all the Activities within the model that are well / best supported by having a maintained CMDB as a resource.