SekitCrosswalk
ENES
Start now
Sekit CSF · Asset Management · Policy

RCF-0037Hardware inventory

All physical devices used by the company are formally required to be recorded and tracked

Mapping at a glance
RCF-0037Hardware inventoryAsset Management · Policy
A.5.9Inventory of information and other associated assetsISO/IEC 27001:2022ID.AM-01Hardware inventory maintainedNIST CSF 2.0ID.AM-02Software inventory maintainedNIST CSF 2.0A.4.5System and computing resourcesISO/IEC 42001:2023 — Annex A

RCF-0037 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.9Inventory of information and other associated assetssupportsThis policy control requires every company device to be registered in a single inventory from purchase to disposal, covering the hardware slice of the asset inventory A.5.9 requires.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.AM-01Hardware inventory maintainedID.AM-02Software inventory maintained

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.4.5System and computing resourcessupportsRCF-0037 requires every company device to be registered from purchase to disposal; A.4.5 needs that inventory extended to the infrastructure and capacity behind AI systems, which a device-focused register does not capture on its own.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Hardware asset inventory
The list of all the company's physical devices (computers, laptops, servers, phones, network gear) with who uses them and where they are.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0038 ProcessRCF-0039 Technical

All Asset Management controls

Asset Management
Ask Sekura: “What evidence proves RCF-0037?”
Also via MCP, free with account