Under active development Content is continuously updated and improved

AST-04.1Asset Scope Classification

Weight: 8

>Control Description

Mechanisms exist to determine cybersecurity and data protection control applicability by identifying, assigning and documenting the appropriate asset scope categorization for all Technology Assets, Applications and/or Services (TAAS) and personnel (internal and third-parties).

>Cross-Framework Mappings

NIST SP 800-53 r5

NIST CSF 2.0

ISO 27001:2022

PCI DSS v4.0.1

IEC TR 60601-4-5

ISO 27001:2022 (Detailed)

ISO 27002:2022

ISO 42001:2023 (Detailed)

NIST SP 800-161

NIST SP 800-172

NIST SP 800-207 Zero Trust

Ask AI

Configure your API key to use AI features.