A Configuration Management Database is a centralised repository that stores information about all significant IT assets (configuration items) and the relationships between them. It provides a single source of truth for understanding the IT landscape, including servers, applications, network devices, databases and their dependencies.
An accurate and up-to-date CMDB is essential for effective change management, incident response and risk assessment. When a security incident occurs, the CMDB enables rapid impact analysis by revealing which systems and services are affected. For ISO 27001 compliance, the CMDB supports the asset management requirements and provides auditors with evidence of comprehensive IT asset oversight.