Back

Assign ownership of maintaining the asset inventory, as necessary.


CONTROL ID
12344
CONTROL TYPE
Human Resources Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Assets must be classified in terms of business criticality in support of dynamic and distributed physical and virtual computing environments, service-level expectations, and operational continuity requirements. A complete inventory of business-critical assets located at all sites and/or geographical… (DCS-01, Cloud Controls Matrix, v3.0)
  • Assets maintained in the inventory should be owned. (§ 8.1.2 Control ¶ 2, ISO 27799:2016 Health informatics — Information security management in health using ISO/IEC 27002, Second Edition)
  • Management assigns accountability for maintaining an inventory of organizational assets. (Domain 1: Assessment Factor: Governance, IT ASSET MANAGEMENT Baseline 3 ¶ 3, FFIEC Cybersecurity Assessment Tool, Baseline, May 2017)