ISO 27001 5.9 Inventory of Information and Other Associated Assets

Requirement

"An inventory of information and other associated assets, including owners, shall be developed and maintained."[1]

Explanation

An inventory of all the components of the information system must be created. This includes documenting all workstations servers network devices and other systems owned by the organization that process store or transmit information.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo