+AM-02 Asset Inventory
---+AM-02.01B
---+AM-02.02B
---+AM-02.03B
---+AM-02.04B
---+AM-02.05B

1. Übersicht

AM-02 Asset Inventory

-
AM-02.01B The cloud service provider maintains an asset inventory of hardware and software assets in accordance with the asset management framework (cf. AM-01).

Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework.

In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services.
AM-02.02B The inventory is performed automatically and/or by the people or teams responsible for the assets to ensure complete, accurate, valid and consistent inventory throughout the asset lifecycle.

Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework.

In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services.
AM-02.03B Assets are recorded with the information needed to apply the risk management procedure (cf. OIS-07), including the measures taken to manage these risks throughout the asset lifecycle.

Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework.

In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services.
AM-02.04B Changes to the recorded information of an asset are logged.

Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework.

In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services.
AM-02.05B The cloud service provider maintains lists of all users under its responsibility who have access to a specific resource, along with their respective access rights.

Cloud service providers who procure their cloud infrastructure as virtual infrastructure from service organisation (e.g. virtual machines or containers) may use tools provided by the service organisation to inventory those assets, insofar as the cloud service provider deems these suitable based on their asset management framework.

In practice, the implementation of the asset inventory can vary greatly depending on the number, size and complexity of provided cloud services.

These lists can be, but do not have to be, provided by the inventory system established through the criteria AM-02, AM-03 and AM-04.

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.2 Related Regulation

2. Identifizierte Anforderungen

Anforderungen

3. Related Regulations

Regulations
Impressum