A networked IT equipment register is developed, implemented, maintained and verified on a regular basis.
Topic
IT equipment registers
Applicable to
all
History
Priority
should
Jun 2024
A networked IT equipment register is developed, implemented, maintained and verified on a regular basis.
References to ICT equipment were amended to IT equipment.
Sep 2023
A networked ICT equipment register is developed, implemented, maintained and verified on a regular basis.
The existing control relating to an ICT equipment register being developed, implemented and maintained was split into two controls to allow for the optional implementation of separate registers for networked ICT equipment (i.e. those connected to a network and having an IP address) and non-networked ICT equipment (those disconnected from networks and not having an IP address). [ISM-0336, ISM-1869]
Dec 2022
An ICT equipment register is developed, implemented, maintained and verified on a regular basis.
Existing controls relating to the maintenance of registers were amended to ensure registers are developed and implemented in the first instance.
Mar 2022
An ICT equipment register is maintained and verified on a regular basis.
Due to the confusing use of audit terminology, references to ‘audited’ have been changed to ‘verified’. For example, an ICT equipment register is verified (rather than audited) on a regular basis. This will allow security personnel, or other suitable parties, to conduct such activities rather than having to rely on the use of an organisation’s internal auditors.
Aug 2019
An ICT equipment and media register is maintained and regularly audited.
Security control 0336 was modified to refer explicitly to an ICT equipment and media register.
Jul 2019
All ICT equipment and media are registered with a unique identifier in an appropriate register.
2015
Agencies must register all ICT equipment and media with a unique identifier in an appropriateregister.
2010
Agencies should register all media with a unique identifier in an appropriate register; unless it is internallymounted fixed media and the ICT equipment containing the media is registered.