12.4.1 The relevant entities shall develop and maintain a complete, accurate, up-to-date and consistent …

Requirement

The relevant entities shall develop and maintain a complete, accurate, up-to-date and consistent inventory of their assets. They shall record changes to the entries in the inventory in a traceable manner.

Guidance

• Ensure that all assets, including hardware, software, data and services, are listed in the inventory.
• Regularly verify the accuracy of the inventory entries.
• Update the inventory promptly to reflect any changes, such as new assets, decommissioned assets or changes in asset status (section 6.4)
• Use standardised naming conventions and categorization methods to maintain consistency across the inventory.
• Make sure that inventory entries contain the data in the guidance below (sampling).
• Implement validation rules within the inventory to ensure data entered is complete and consistent.

Examples of evidence

• Documentation for the inventory of assets
• Up to date inventory of assets
• Records of reviews or history of changes.
• Records of key metrics tracked, such as the number of assets, types of assets, compliance with inventory policies and the timeliness of updates.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• ENISA -