💼 Asset Management (ID.AM)
- ID:
/frameworks/nist-csf-v1.1/id-am
Description​
The data, personnel, devices, systems, and facilities that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to organizational objectives and the organization's risk strategy.
Similar​
Sub Sections​
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
| 💼 ID.AM-1: Physical devices and systems within the organization are inventoried | | | 3 | | no data |
| 💼 ID.AM-2: Software platforms and applications within the organization are inventoried | | 5 | 7 | | no data |
| 💼 ID.AM-3: Organizational communication and data flows are mapped | | 4 | 8 | | no data |
| 💼 ID.AM-4: External information systems are catalogued | | | | | no data |
| 💼 ID.AM-5: Resources (e.g., hardware, devices, data, time, personnel, and software) are prioritized based on their classification, criticality, and business value | | | | | no data |
| 💼 ID.AM-6: Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders (e.g., suppliers, customers, partners) are established | | | | | no data |