The enterprise keeps a current and accurate record of every I&T asset that is needed to deliver services and that it owns or controls in expectation of future benefit: all owned assets are listed in an asset register showing their current status, meaning the balance-sheet assets bought or built to add to the firm's value or support its operations; the legal, regulatory and contractual requirements for managing each asset are identified; assets are checked to be fit for purpose; every asset is accounted for; the existence of owned assets is confirmed through regular physical and logical stock-takes and reconciliations, software discovery tools included; and the enterprise regularly determines whether each asset still gives value and estimates how long it is expected to remain useful.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.