Asset Identification and Classification (CSF: ID.AM)

  • Maintain an up-to-date inventory of assets using automated tooling (e.g., CMDB, MDM, CSPM).

  • Classify assets by business criticality, data sensitivity, and threat exposure.

  • Tag all assets for ownership, lifecycle stage, and update responsibility.

References:

CSF: ID.AM https://csf.tools/reference/nist-cybersecurity-framework/v1-1/id/id-am/

CMDB https://www.techtarget.com/searchdatacenter/definition/configuration-management-database

MDM https://www.ncsc.gov.uk/collection/device-security-guidance/getting-ready/mobile-device-management

CSPM https://www.gartner.com/en/information-technology/glossary/cloud-security-posture-management

PreviousTVM Lifecycle OverviewNextThreat Intelligence Integration (CSF: ID.RA-2)

Last updated