Assets and obligations
Learn how tracking the platform’s asset and liability inventory captures systems, data warehouses, and legal or contractual requirements beyond a framework.
Assets and liabilities provide a context that does not always fit well in a framework.
An asset is something that the organization needs to understand and protect, such as a service, a system, a warehouse, a device class or a data warehouse.
Linking assets to controls, measures, risks and other records that explain how they are protected. An asset inventory is useful only as long as it reflects the systems that the organization actually operates so that it assigns property and revises it when the architecture changes.
Obligations
Section entitled ‘Obligations’An obligation records a legal, regulatory, contractual or customer requirement. It is separate from a framework control because the source and formulation can be specific to the organization.
Link obligations to:
- controls that meet the requirement;
- riscurile generate de neconformitate;
- measures and evidence demonstrating the implementation;
- documents formalizing the organization's response.
Publishing lists of assets and liabilities creates revised instant images for reporting.