IT-03:AM-01

Asset inventory maintained, classified by criticality, and kept current

Status

No evidence

Policy cadence

Quarterly

Last evidence

—

Next due

—

Owner

CTO

TSC

CC7.1

Evidence folder

03_Vulnerability_Management

Automatable

Yes

Policy

IT-03

Policy version

Not yet written — IS-11 §13 lists it as 'to be developed'; ID assigned by ComplianceHub

Collectors

Collector	Relationship	Samples	What it observes
inventory.ansible	satisfies	weekly	Discovers hosts and public URLs from the Ansible deployment inventories
inventory.domains	satisfies	weekly	Registers the configured in-boundary public domains as assets
scans.hosts	supports	weekly	Weekly authenticated OS package CVE scan of every host in the inventory

Collected	Collector	Result	Source	Digest
No artifact satisfies this control.