Changes to assets are documented, at least in an ad hoc manner
Context and Guidance: Any changes made to an inventoried asset are captured in a format that can be easily referenced during troubleshooting or incident response activities. Changes may include the alteration of settings such as routing and port configurations in network devices, the addition or removal of components, and modification of access privileges. Some of the attributes that should be captured include date and time of the change, who made the change, the assets affected by the change, and a description of any risks associated with the change.
Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ASSET-4b, ASSET-4c, ASSET-4i.