Back

Record all changes to assets in the asset inventory.


CONTROL ID
12190
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The assets (e. g. PCs, peripheral devices, telephones, network components, servers, installation documentation, process instructions, IT applications, tools) used to render the cloud service are identified and inventoried. By means of appropriate processes and safeguards, it is ensured that this inv… (Section 5.4 AM-01 Basic requirement ¶ 1, Cloud Computing Compliance Controls Catalogue (C5))
  • Establish a supporting tool and a central repository to contain all relevant information on configuration items. Monitor and record all assets and changes to assets. Maintain a baseline of configuration items for every system and service as a checkpoint to which to return after changes.. (DS9.1 Configuration Repository and Baseline, CobiT, Version 4.1)
  • An inventory of all mobile devices used to store and access company data shall be kept and maintained. All changes to the status of these devices, (i.e., operating system and patch levels, lost or decommissioned status, and to whom the device is assigned or approved for usage (BYOD), will be include… (MOS-09, Cloud Controls Matrix, v3.0)
  • equipment; (§ 8.1.3 ¶ 1 a) Bullet 4, ISO 45001:2018, Occupational health and safety management systems — Requirements with guidance for use, First Edition)
  • Interview management and review responses to pre-examination information requests to identify changes to technology infrastructure or new products and services that could affect business resilience. Consider the following: (App A Objective 1:3, FFIEC Business Continuity Planning (BCP) IT Examination Handbook, November 2019)
  • Adds assets to the inventories and tracks changes made to assets. (App A Objective 4:4b, FFIEC Information Technology Examination Handbook - Architecture, Infrastructure, and Operations, June 2021)