💼 Asset Management (ID.AM)

• ID: /frameworks/nist-csf-v2.0/id-am

Description

Assets (e.g., data, hardware, software, systems, facilities, services, people) that enable the organization to achieve business purposes are identified and managed consistent with their relative importance to organizational objectives and the organization's risk strategy.

Similar

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 ID.AM-01: Inventories of hardware managed by the organization are maintained			4		no data
💼 ID.AM-02: Inventories of software, services, and systems managed by the organization are maintained			9		no data
💼 ID.AM-03: Representations of the organization's authorized network communication and internal and external network data flows are maintained			48		no data
💼 ID.AM-04: Inventories of services provided by suppliers are maintained					no data
💼 ID.AM-05: Assets are prioritized based on classification, criticality, resources, and impact on the mission					no data
💼 ID.AM-07: Inventories of data and corresponding metadata for designated data types are maintained			2		no data
💼 ID.AM-08: Systems, hardware, software, services, and data are managed throughout their life cycles			21		no data