Asset Management
What is Asset Management?
The systematic process of identifying, classifying, tracking, and managing an organization's information assets throughout their lifecycle to ensure proper protection.
Terms that appear alongside asset management
Each of these is named in at least one of the same controls as asset management. The number is how many controls name both.
- nist 14 shared controls
- cybersecurity 14 shared controls
- asset inventory 13 shared controls
- governance 12 shared controls
- policy 11 shared controls
- compliance 9 shared controls
- management system 9 shared controls
- risk assessment 8 shared controls
Frameworks that govern asset management
What the standards actually require on asset management
Requirements naming asset management across 6 standards, quoted from the control text.
Requirement defined in ISO 55001:2014, clause 4.4 (Asset management system). See licensed source for normative text. Implementation focus is to demonstrate conformity with the obligations of this clause through the artefacts listed in evidence_requirements.
iso-55001-2014::4.4 · Asset management system →HKMA C-RAF Domain 1 GOVERNANCE + Domain 2 IDENTIFICATION. DOMAIN 1 GOVERNANCE (5 sub-areas): (1) CYBER RISK GOVERNANCE - board + senior management oversight + governance structure + reporting lines + delegation; board cyber-risk literacy + training;
HKMA-CRAF-Domain1-2-Governance-Identification · HKMA C-RAF Domain 1 (Governance) + Domain 2 (Identification) - Cyber Strategy, Risk Management, Asset Management, Threat Assessment →Implement written policies and procedures for asset inventory tracking (hardware, software, and data including end-of-life), and for secure disposal of Nonpublic Information that is no longer necessary for business operations or other legitimate purposes (exce...
§500.13 · Asset Management and Data Retention Requirements →Maintain a centralised asset management system covering hardware, software and data inventories for visibility of critical assets.
ASIC-CR-AM-1 · Centralised asset management system →Limit user access to asset management features so assets cannot be modified accidentally or maliciously.
ASBv3-AM-4 · Limit access to asset management →Asset management and data flow mapping. Implements CyFun ID.AM-3 / ID.AM-4: organisational communication and data flows are mapped and external information systems are catalogued.
BE-CF-33 · Asset management and data flow mapping →Questions people ask about asset management
What is Asset Management?
Why is Asset Management important for compliance?
Which compliance frameworks address Asset Management?
Where can I learn more about Asset Management?
See how Asset Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.