+Asset Inventory

Asset Inventory

The Cloud Service Provider has established procedures for inventorying assets.
The inventory is performed automatically and/or by the people or teams responsible for the assets to ensure complete, accurate, valid and consistent inventory throughout the asset lifecycle.
Assets are recorded with the information needed to apply the Risk Management Procedure (Cf. OIS-07), including the measures taken to manage these risks throughout the asset lifecycle. Changes to this information are logged.
Additonal CriteriaLogging and monitoring applications take into account the information collected on the assets in order to identify the impact on cloud services and functions in case of events that could lead to a breach of protection objectives, and to support information provided to affected cloud customers in accordance with contractual agreements.
Supplementary Information - About the CriteriaAssets within the meaning of this criteria area are the objects required for the information security of the cloud service during the creation, processing, storage, transmission, deletion or destruction of information in the Cloud Service Provider's area of responsibility, e.g. firewalls, load balancers, web servers, application servers and database servers.
These objects consist of hardware and software objects:Hardware objects are
• Physical and virtual infrastructure resources (e.g. servers, storage systems, network components); and
• As well as end devices if the Cloud Service Provider has determined in a risk assessment that these could endanger the information security of the cloud service in the event of loss or unauthorised access (e.g. mobile devices used as security tokens for authentication).
Software objects are e.g. hypervisors, containers, operating systems, databases, microservices and programming interfaces (APIs).
The lifecycle of an asset includes:
• Acquisition;
• Commissioning;
• Maintenance;
• Decommissioning; and
• Disposal.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin