DCS-05: Assets Classification
Control Family:
CSF v2.0 References:
Previous Version:
- Cloud Controls Matrix v3.0.1:
- DCS-01: Asset Management
Control Statement
Classify and document the physical, and logical assets (e.g., applications) based on the organizational business risk.
Implementation Guidance
The facility management should develop a naming convention for asset classification that meets legal, value, and business requirements to protect restricted information sharing.
Auditing Guidance
- Examine the policy relating to defining the organization's business risk.
- Confirm that the physical and logical assets are being classified in accordance with defined policy and procedures.
- Review the asset Inventory to determine if assets are catalogued and tagged according to the organization's business risk classification criteria.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.