Security

ISO 27001 Asset Management Controls: A Practical Checklist

A6.5–A6.7 (Annex A) translated into concrete actions your team can complete this quarter, with evidence templates.

JJoel Rivera··7 min read

The 2022 revision of ISO 27001 moved asset management into theme A6 (People) and theme A7 (Physical). For an auditor, four controls dominate.

A6.5 Inventory of information and other associated assets

Maintain a living inventory with an owner per asset. Evidence: a CSV export of every asset, owner, and classification, dated within the audit window.

A6.6 Acceptable use of information and associated assets

A signed acknowledgement on issue. Evidence: per-asset assignment record with timestamp and user.

A6.7 Return of assets

Documented offboarding with asset retrieval. Evidence: check-in record on the day of termination plus a secure wipe certificate.

A7.10 Storage media

Disposal procedure for storage media. Evidence: certificate of destruction or wipe.

AssetMon's immutable audit log captures every check-out, check-in, status change and assignment — exactly the trail ISO auditors want to see.

#ISO 27001#asset management controls#compliance#audit-ready

Keep reading

Security

License Compliance: How to Avoid a Vendor Audit Nightmare

Vendor audits cost mid-size companies an average of $260K in true-ups. Here is the SAM playbook that keeps you compliant year-round.

Security

The True Cost of a Lost Laptop (And How to Prevent It)

A lost laptop costs more than its replacement value. We break down the direct, indirect and reputational costs — and how to drop your loss rate.

Security

GDPR and Asset Management: What You Need to Know in 2026

Personal data lives on every laptop and license. Here is how to keep ITAM aligned with GDPR + DPDP without slowing your team down.