An asset inventory is maintained to track, identify, and record all organizational assets, assign ownership, and monitor their location and status throughout their lifecycle.

Asset owners are designated for each asset, establishing clear responsibility for managing and safeguarding assets throughout their lifecycle. This includes identifying, classifying, and valuing assets and implementing appropriate security measures. Designating asset owners ensures accountability, effective communication, and proper utilization and protection of vital assets.

The organization has established asset security requirements to protect assets from unauthorized access, theft, loss, damage, or destruction. These requirements define the minimum security measures necessary to ensure asset confidentiality, integrity, and availability. The control involves identifying, classifying, and categorizing assets, developing and implementing security controls and countermeasures, and continuously monitoring and reviewing their effectiveness. Periodic updates are made to adapt to changing threats and business needs.