The organization should establish and document procedures for managing the entire lifecycle of its assets. This should involve a formal asset management process for adding new assets, installing equipment according to a defined plan, maintaining records of installed equipment and securely removing assets from service. Assets should be classified based on their confidentiality, integrity, accountability, and availability.
As part of this lifecycle management, the organization should also establish a periodic process to verify and review its asset inventories against the actual assets in use at least once a year. Any discrepancies found, such as unlisted devices or missing equipment, should be investigated and the inventory records corrected accordingly.
.svg)
