How is our NIST compliance? Do we have accurate records on all hardware & software?

Consult MAMAT. Both operations in self contained database that’s easy to use.

Helps to Assess – C2M2 – Cybersecurity Capability Maturity Model