Status: Live
The organization will report on the percentage of scheduled asset inventories that occurred on time. [UCF ID 02055]
Metric guidance
Calculation: The calculation for this metric is # of scheduled asset inventories that occurred on time / # of scheduled asset inventories.
Calculation source: No authority document source of information exists. The following formula was used: the number of inventories that happened when they were scheduled to occur divided by the list of asset inventories scheduled for each business unit (or the organization as a whole) for the reporting period.
The Common Control IDs associated with this metric are as follows:
- • Maintain asset discovery audit trails [UCF Control ID 00689]
• Maintain a hardware inventory [UCF Control ID 00691]
• Software inventory [UCF Control ID 00692]
• Networking inventory [UCF Control ID 00693]
• Maintain an accurate media inventory [UCF Control ID 00694]
• Document, database, and messaging inventory [UCF Control ID 01260]
• Inventory and physically secure all media that stores confidential information [UCF Control ID 00962]
Supporting and supported controls
This control directly supports:
- • Establish and maintain an identification and classification of information assets metrics program [UCF Control ID 02052]
There are no supporting controls.
Authority documents complied with:
CISWG Information Security Program Elements, January 10,2005, ISPE12.3; IIA Global Technology Audit Guide (GTAG): Information Technology Controls, § 18.2
US Federal Security Guidance
The organization must measure and report on the percentage of scheduled asset inventories that occurred on time according to policy. [ISPE12.3, CISWG Information Security Program Elements, January 10,2005]
General Guidance
The purpose of this measurement is to measure the date when the asset inventory was last updated. [§ 18.2, IIA Global Technology Audit Guide (GTAG): Information Technology Controls]
Copyright 2005-2009 Unified Compliance Framework™. All rights reserved.