CMDB Explained: Configuration Management Databases for Security+ and CySA+
A CMDB — Configuration Management Database — is the authoritative record of what an organization actually owns, how it is configured, and how the pieces connect to each other. It is a core ITIL concept and it turns up on several CompTIA exams, usually in a context where someone needs to answer a question they cannot answer. A CMDB answers one question well: if this thing breaks or changes, what else is affected? Plenty of organizations have an asset inventory. Far fewer have a CMDB, and the difference is not pedantic. An asset list tells you that you own 400 servers. A CMDB tells you that this server runs the database behind the payroll application, which finance uses on the 28th of every month, and that patching it on a Thursday afternoon is a bad idea. Configuration Items The unit of record in a CMDB is the configuration item , or CI. A CI is anything under configuration control, which is broader than hardware: Hardware — servers, network devices, storage, endpoints, a...