12.4.3 The relevant entities shall regularly review and update the inventory and their assets and document …

Requirement

The relevant entities shall regularly review and update the inventory and their assets and document the history of changes.

Guidance

• Conduct regular reviews to verify the accuracy and completeness of the inventory.
• Maintain history of changes.

Examples of evidence

• Up-to-date inventory of assets including history of changes.
• Regular reports generated on inventory status, changes and audit findings.

Tips: guidance

• Use tools that support the comprehensive tracking and management of assets.
• Ideally, consider the use of tools for automated discovery and asset tracking to continuously discover, categorize, and monitor both on-premises and cloud assets, ensuring comprehensive, up-to-date visibility and security. Alternatively, consider manual update procedures.
• Configure the chosen tool to capture the defined attributes and categories, ensuring it supports relevant functionalities such as tagging, searching and reporting.
• Set up automated alerts for missing or incomplete data, discrepancies and anomalies detected in the inventory.

Tips: examples of evidence

• Configuration settings of the asset management tool.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• ENISA -