5.9
Inventory of Information and Other Associated Assets
Create and maintain an inventory of information and associated assets, including owners.
-
4.4.3.2 The organization shall develop and maintain an asset register of its information systems and IT assets, including records showing management’s understanding of the assets’ purpose. For any information systems and assets not included in their implementation of the baseline cyber security controls, the organization shall document all instances where they make the business decision not to do so..
-
-