+12.4.3 The relevant entities shall regularly review and update the inventory and their assets and document …

12.4.3 The relevant entities shall regularly review and update the inventory and their assets and document …

Requirement

The relevant entities shall regularly review and update the inventory and their assets and document the history of changes.

Guidance

  • Conduct regular reviews to verify the accuracy and completeness of the inventory.
  • Maintain history of changes.

Examples of evidence

  • Up-to-date inventory of assets including history of changes.
  • Regular reports generated on inventory status, changes and audit findings.

Tips: guidance

  • Use tools that support the comprehensive tracking and management of assets.
  • Ideally, consider the use of tools for automated discovery and asset tracking to continuously discover, categorize, and monitor both on-premises and cloud assets, ensuring comprehensive, up-to-date visibility and security. Alternatively, consider manual update procedures.
  • Configure the chosen tool to capture the defined attributes and categories, ensuring it supports relevant functionalities such as tagging, searching and reporting.
  • Set up automated alerts for missing or incomplete data, discrepancies and anomalies detected in the inventory.

Tips: examples of evidence

  • Configuration settings of the asset management tool.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is related to 12.4.3. L-entitajiet rilevanti għandhom jirrieżaminaw u jaġġornaw regolarment l-inventarju u l-assi …
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.