Asset Management
What is Asset Management?
The systematic process of identifying, classifying, tracking, and managing an organization's information assets throughout their lifecycle to ensure proper protection.
Terms that appear alongside asset management
Each of these is named in at least one of the same controls as asset management. The number is how many controls name both.
- nist 14 shared controls
- cybersecurity 14 shared controls
- asset inventory 13 shared controls
- governance 12 shared controls
- policy 11 shared controls
- compliance 9 shared controls
- management system 9 shared controls
- risk assessment 8 shared controls
Frameworks that govern asset management
What the standards actually require on asset management
Requirements naming asset management across 6 standards, quoted from the control text.
The organization sets up an asset management system, runs it, keeps it going and keeps making it better, together with the processes the system needs and the way those processes interact, as the standard requires.
iso-55001-2024::4.4 · Asset management system →The organization sets up, runs, maintains and continually improves an asset management system, together with the processes it requires and the way those processes interact.
iso-55001-2014::4.4 · Asset management system →Automated processes detect and block unauthorised changes to software and hardware.
ffiec-cybersecurity-assessment-tool-cat::D1.G.IT.A.3 · D1.G.IT.A.3 IT Asset Management (Advanced 3) →Advanced control principles for it asset management (required, with baseline and intermediate, of an AI whose inherent risk is high). Supply chain risk is reviewed before acquiring mission-critical information systems and components;
hkma-cyber-resilience-assessment-framework-c-raf::2.1.A · 2.1 IT asset management: advanced level →Cybersecurity requirements for managing the entity's information and technology assets are identified, documented and approved.
saudi-nca-ecc::2-1-1 · 2-1-1 Asset management requirements defined and approved →The entity must document and implement an ICT asset management procedure that sets the criteria for assessing the criticality of information assets and ICT assets supporting business functions.
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::5 · Article 5: ICT asset management procedure →Questions people ask about asset management
What is Asset Management?
Why is Asset Management important for compliance?
Which compliance frameworks address Asset Management?
Where can I learn more about Asset Management?
See how Asset Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.