risk
Incomplete asset inventory and classification
No authoritative inventory of information and associated assets, missing ownership, acceptable-use, classification, labelling, or handling rules — preventing effective protection, risk assessment, and secure disposal.
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-09-17T22:28:00Z (f368a6cce277)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- category
- operational
- domain
- Asset Management & Inventory
- Data Protection & Privacy
- taxonomy
- iso-27005-vulnerability
- inherent_rating
- medium
Details
- risk_id
- asset-inventory-gap
- category
- operational
- likelihood
- high
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-vulnerability
Source
No record-specific source URL is provided.
Connections
- UC-ASSET-03 — Classify, prioritize, and label information and assets mitigates Incomplete asset inventory and classification
- strength
- primary
- rationale
- Classifying and labelling information/assets directly remediates the missing classification/labelling this risk names in its title and description.
- UC-ASSET-06 — Govern acceptable use of endpoints, off-site, and external systems mitigates Incomplete asset inventory and classification
- strength
- related
- rationale
- Defining, communicating, and acknowledging acceptable-use rules closes the missing acceptable-use dimension of the gap.
- UC-ASSET-02 — Inventory data and document processing activities and flows mitigates Incomplete asset inventory and classification
- strength
- related
- rationale
- The data/information inventory component contributes to overall asset accountability; the systems inventory itself is UC-01.
- UC-ASSET-01 — Maintain a complete inventory of systems, hardware, and software mitigates Incomplete asset inventory and classification
- strength
- primary
- rationale
- Maintaining the authoritative hardware/software/system inventory directly closes the missing-inventory gap this risk describes.
- UC-ASSET-07 — Manage assets through their life cycle and recover them at exit mitigates Incomplete asset inventory and classification
- strength
- related
- rationale
- Defined per-stage ownership plus issuance/return tracking supports the asset accountability the gap risk lacks.
- UC-ASSET-05 — Inventory supplier services and assess critical suppliers mitigates Incomplete asset inventory and classification
- strength
- related
- rationale
- Supplier-service inventory with named internal owners extends asset accountability to third-party services.