12.4.1 The relevant entities shall develop and maintain a complete, accurate, up-to-date and consistent …

Requirement

The relevant entities shall develop and maintain a complete, accurate, up-to-date and consistent inventory of their assets. They shall record changes to the entries in the inventory in a traceable manner.

Guidance

• Ensure that all assets, including hardware, software, data and services, are listed in the inventory.
• Regularly verify the accuracy of the inventory entries.
• Update the inventory promptly to reflect any changes, such as new assets, decommissioned assets or changes in asset status (section 6.4)
• Use standardised naming conventions and categorization methods to maintain consistency across the inventory.
• Make sure that inventory entries contain the data in the guidance below (sampling).
• Implement validation rules within the inventory to ensure data entered is complete and consistent.

Examples of evidence

• Documentation for the inventory of assets
• Up to date inventory of assets
• Records of reviews or history of changes.
• Records of key metrics tracked, such as the number of assets, types of assets, compliance with inventory policies and the timeliness of updates.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• ENISA -

  EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

  DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.