Control Category: Asset and Information Management

  • Data inventory

    Create and maintain an information inventory that includes classification level, information owner, and users with access.

    Read more: Data inventory

  • System inventory

    Create and maintain an inventory of systems that includes device ownership, contact information, and network configuration.

    Read more: System inventory

  • Application inventory

    Create and maintain an application inventory that includes assigned risk classification level, data volume, and users with access.

    Read more: Application inventory