Back to all 93 controls
    Annex A 5.9
    Organizational

    A.5.9 Inventory of information and other associated assets

    Know what you have to protect.

    What good looks like

    Up-to-date inventory of information assets and supporting assets with owners.

    Evidence an auditor will ask for

    Asset register, last-reviewed date, owner column populated.

    Document template for this control

    The Asset Management Policy template gives you auditor-ready wording that fulfils Annex A 5.9. Preview the full document before you download the editable version.