Register
Asset Inventory Register
This register defines the schema, governance, and classification model for the organizational Asset Inventory. The Asset Inventory is the authoritative record of all IT hardware, software, cloud resources, data assets, and AI systems owned, managed, or used by the organization as IT assets. For AI systems, the Asset Inventory records them as deployed IT assets and defers to the AI System Inventory (the authoritative AI-governance record of all AI models and systems, owned by the AI System Inventory Keeper) for their AI-governance attributes such as model lineage, organizational AI risk classification, and lifecycle status. It supports risk assessments, vulnerability management, disaster recovery planning, and compliance activities.
- Type
- Register
- Version
- 1.1.3
- Date
- 2026-10-27
- Owner
- Chief Information Officer
- Approving authority
- Chief Information Officer
- Classification
- Public
- Confidentiality
- Public
- Category
- Operations
- Review frequency
- Continuous (automated) with quarterly manual validation
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Scope
- Asset classification
- Asset record schema
- Governance and accountability
- Lifecycle management
- Framework alignment
Frameworks it maps to
- ISO/IEC 27001:2022
- ISO/IEC 27002:2022
- NIST SP 800-53 Rev. 5
- COBIT 2019
- CSA CCM v4.1
- NIST IR 8011 Vol. 2 (Hardware Asset Management)
Related documents
- Software Evaluation, Acceptance and Lifecycle Management Standarddev-security
- Patch Management Procedureoperations
- Enterprise Governance and Risk Management Policyrisk
- IT Disaster Recovery Planresilience
Next
All Documents