Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >ASSET
  4. >Manage Information Asset Inventory
  5. >AESCSF-ASSET-2g
AESCSF-ASSET-2gActive

The information asset inventory is current, that is, it is updated periodically and according to defined triggers, su...

Statement

The information asset inventory is current, that is, it is updated periodically and according to defined triggers, such as system changes

Context and Guidance: The inventory of information assets should be updated and maintained as assets change throughout their lifecycle to ensure the inventory is complete and accurate. Ensuring that the information asset inventory is current might involve change management procedures that require inventory updates any time assets are significantly altered. The organisation might also conduct inventory reviews, both periodically (such as quarterly or yearly) and based on events (such as changes in organisational structure, major changes in critical systems, and the acquisition and consolidation of another business).

Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ASSET-2a, ASSET-2b, ASSET-2f, ASSET-2g.

Location

Domain
ASSET
Objective
Manage Information Asset Inventory

Practice Details

Identifier
AESCSF-ASSET-2g
Type
Practice
Domain
ASSET
Objective
Manage Information Asset Inventory

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
ISM
ISM-1493relatedvia aescsf-reference
ISM-1643relatedvia aescsf-reference
C2M2
C2M2-ASSET-2Gequivalentvia derived-shared-practice-structure
ISO 27001
ISO27001-7.11relatedvia aescsf-reference
ISO27001-7.12relatedvia aescsf-reference
View in graphReport an issue
← Back to Manage Information Asset Inventory
Manage Information Asset Inventory8 controls
AESCSF-ASSET-2aInformation assets that are important to the delivery of the function (for example, SCADA set points and customer inf...AESCSF-ASSET-2bThe information asset inventory includes information assets within the function that may be leveraged to achieve a th...AESCSF-ASSET-2cInventoried information assets are categorised based on defined criteria that includes importance to the delivery of ...AESCSF-ASSET-2dCategorisation criteria include consideration of the degree to which an asset within the function may be leveraged to...AESCSF-ASSET-2eThe information asset inventory includes attributes that support cybersecurity activities (for example, asset categor...AESCSF-ASSET-2fThe information asset inventory is complete (the inventory includes all assets within the function)AESCSF-ASSET-2gThe information asset inventory is current, that is, it is updated periodically and according to defined triggers, su...AESCSF-ASSET-2hInformation assets are sanitised or destroyed at end of life using techniques appropriate to their cybersecurity requ...