Implementation Objective
Keep an accurate, owned, and risk-ranked inventory of assets to support protection, detection, and recovery decisions.
NIST CSF 2.0 Category
ID.AM Asset Management
ID Identify | Maintain complete inventory and ownership of technology and data assets.
Implementation Actions
- Automate asset discovery.
- Assign ownership and criticality.
- Remediate unmanaged assets.
Evidence Examples
- Asset inventory export
- Ownership register
- Unmanaged asset tickets
Suggested Metrics
- Known-asset coverage
- Unmanaged asset remediation time
Framework Crosswalk
Direct mappings for this CSF category into NIST SP 800-171 family sections and CIS Controls v8 implementation domains.