Set procedures to manage information assets (information systems and external system services such as outsourcees and cloud, their hardware, software and stored data, and networks) across their lifecycle (acquisition, use, storage, disposal) and review them as needed; classify and manage assets by importance (confidentiality, integrity, availability) to prioritise protection, also referring to the information security management items of each sector's supervisory guidelines.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.