Asset Management

In relation to Information Security, organizations should track and monitor their assets. For organizations that don’t have an asset management tool, a spreadsheet can be used as a starting point to develop an asset inventory. An asset inventory must have key fields such as Asset Name, Asset Location, and Asset Owner –other fields to consider include Commission Date and Decommission Date. 

Control Objective

  • Asset management policy (must follow the commission/decommission process)
  • Commission/decommission process says you must add to the asset management inventory
  • Asset management inventory
  • Schedule reviewed at least annually

Resources

Asset Management - Basic (XLSX)

Asset Management - Advanced (XLSX)