Report on the percentage of scheduled asset inventories that occurred on time.

UCF ID: 02055

Control Type: Actionable Reports or measurements

Status: Live

Metric guidance

Calculation: The calculation for this metric is # of scheduled asset inventories that occurred on time / # of scheduled asset inventories.

Calculation source: No authority document source of information exists. The following formula was used: the number of inventories that happened when they were scheduled to occur divided by the list of asset inventories scheduled for each business unit (or the organization as a whole) for the reporting period.

The Common Control IDs associated with this metric are as follows:

Maintain asset discovery audit trails. [UCF Control ID 00689]

Maintain a hardware inventory. [UCF Control ID 00691]

Maintain a software inventory. [UCF Control ID 00692]

Maintain a networking inventory. [UCF Control ID 00693]

Maintain a media inventory. [UCF Control ID 00694]

Maintain a document, database, and messaging inventory. [UCF Control ID 01260]

Inventory and physically secure all media that store classified information. [UCF Control ID 00962]

Supporting and supported controls

This control directly supports:

Establish and maintain an identification and classification of information assets metrics program. [UCF Control ID 02052]

There are no supporting controls.

Authority documents complied with:

CISWG Information Security Program Elements, January 10,2005, ISPE12.3; IIA Global Technology Audit Guide (GTAG): Information Technology Controls, § 18.2

US Federal Security Guidance

The organization must measure and report on the percentage of scheduled asset inventories that occurred on time according to policy. [ISPE12.3, CISWG Information Security Program Elements, January 10,2005]

General Guidance

The purpose of this measurement is to measure the date when the asset inventory was last updated. [§ 18.2, IIA Global Technology Audit Guide (GTAG): Information Technology Controls]