Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >C2M2
  3. >Asset, Change, And Configuration Management
  4. >Asset, Change, And Configuration Management - Objective 2
  5. >C2M2-ASSET-2G
C2M2-ASSET-2GActive

The information asset inventory is current, that is, it is updated periodically and according to defined triggers, such as system changes

Statement

The information asset inventory is current, that is, it is updated periodically and according to defined triggers, such as system changes

Location

Domain
Asset, Change, and Configuration Management
Objective
Asset, Change, and Configuration Management - Objective 2

Practice Details

Identifier
C2M2-ASSET-2G
Domain
Asset, Change, and Configuration Management
Objective
Objective 2
Maturity Level
MIL-3

Help Text

The inventory of information assets should be updated and maintained as assets change throughout their lifecycle to ensure the inventory is complete and accurate. Ensuring that the information asset inventory is current might involve change management procedures that require inventory updates any time assets are significantly altered. The organization might also conduct inventory reviews, both periodically (such as quarterly or yearly) and based on events (such as changes in organizational structure, major changes in critical systems, and the acquisition and consolidation of another business).

Related Practices · Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ASSET-2a, ASSET-2b, ASSET-2f, ASSET-2g.

AESCSF
AESCSF-ASSET-2gequivalentvia derived-shared-practice-structure
View in graphReport an issue
← Back to Asset, Change, and Configuration Management - Objective 2
Asset, Change, and Configuration Management - Objective 28 controls
C2M2-ASSET-2AInformation assets that are important to the delivery of the function (for example, SCADA set points and customer information) are inventoried, at least in an ad hoc mannerC2M2-ASSET-2BThe information asset inventory includes information assets within the function that may be leveraged to achieve a threat objectiveC2M2-ASSET-2CInventoried information assets are categorized based on defined criteria that includes importance to the delivery of the functionC2M2-ASSET-2DCategorization criteria include consideration of the degree to which an asset within the function may be leveraged to achieve a threat objectiveC2M2-ASSET-2EThe information asset inventory includes attributes that support cybersecurity activities (for example, asset category, backup locations and frequencies, storage locations, asset owner, cybersecurity requirements)C2M2-ASSET-2FThe information asset inventory is complete (the inventory includes all assets within the function)C2M2-ASSET-2GThe information asset inventory is current, that is, it is updated periodically and according to defined triggers, such as system changesC2M2-ASSET-2HInformation assets are sanitized or destroyed at end of life using techniques appropriate to their cybersecurity requirements