ID.AM-07—Inventories of data and corresponding metadata for designated data types are maintained
>Control Description
This asset management subcategory ensures that inventories of data and corresponding metadata for designated data types are maintained. Key activities include: Maintain a list of the designated data types of interest (e; Continuously discover and analyze ad hoc data to identify new instances of designated data types; Assign data classifications to designated data types through tags or labels.
>Cross-Framework Mappings
ISO 27001:2022
via NIST OLIR Catalog>Informative References
Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0
CCMv4.0
DSP-01
DSP-03
DSP-04
DSP-06
DSP-10
DSP-19
UEM-02
CIS Controls v8.0
3.2
CIS Controls v8.1
3.2
CRI Profile v2.0
ID.AM-07
ID.AM-07.01
ISO/IEC 27001:2022
Mandatory Clause: None
Annex A Controls: 5.9
NICE Framework
DD-WRL-002
IO-WRL-001
IO-WRL-002
IO-WRL-003
IO-WRL-005
OG-WRL-015
PCI DSS
12.5.2
3.2.1
3.4.1
3.4.2
12.10.7
SCF
DCH-06
PRI-05
PRI-05.5
SP 800-171 Rev 3
03.14.08
SP 800-221A
MA.RI-1
SP 800-53 Rev 5.1.1
CM-12
CM-13
SI-12
SP 800-53 Rev 5.2.0
CM-12
CM-13
SI-12
SP-800-37 Rev 2
RMF Prepare Step (System Level): TASK P-12 Information Types
RMF Prepare Step (System Level): TASK P-13 Information Life Cycle
Ask AI
Configure your API key to use AI features.