PE-20—Asset Monitoring And Tracking
>Control Description
Employ ⚙organization-defined asset location technologies to track and monitor the location and movement of ⚙organization-defined assets within ⚙organization-defined controlled areas.
>Cross-Framework Mappings
>Supplemental Guidance
Asset location technologies can help ensure that critical assets--including vehicles, equipment, and system components--remain in authorized locations. Organizations consult with the Office of the General Counsel and senior agency official for privacy regarding the deployment and use of asset location technologies to address potential privacy concerns.
>Related Controls
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies govern asset monitoring and tracking for information system components?
- •How does the organization determine which assets require tracking and what methods to use?
- •What is the process for reconciling physical asset inventories with documented records?
- •How are discrepancies in asset tracking investigated and resolved?
- •What governance exists for maintaining accurate asset inventories?
Technical Implementation:
- •What asset tracking technologies are deployed (RFID, barcodes, GPS)?
- •How are tracking systems configured and managed?
- •What real-time location or movement monitoring capabilities exist?
- •How do asset tracking systems integrate with inventory management?
- •What alerting mechanisms exist for unauthorized asset movement?
Evidence & Documentation:
- •Provide current asset inventory with tracking information.
- •Provide asset tracking system documentation and configuration.
- •Provide records of asset inventory reconciliations from the past year.
- •Provide evidence of asset location tracking and movement logs.
- •Provide documentation of discrepancy investigation and resolution.
Ask AI
Configure your API key to use AI features.