Which term describes a record used to track all relevant assets?

Prepare for the ISACA IT Risk Fundamentals Test. Find flashcards and multiple choice questions, complete with hints and explanations. Ace your exam with confidence!

Multiple Choice

Which term describes a record used to track all relevant assets?

Explanation:
The concept being tested is keeping a centralized list of every asset an organization relies on. An asset inventory is exactly that—a maintained record of all relevant assets, such as hardware, software, data, networks, and even people or processes that have value or risk attached. Having this inventory is foundational for risk management because you can’t protect what you don’t know you have. It supports ownership assignment, classification, compliance, and tracking changes over time, and it enables effective threat modeling and control placement. Asset value focuses on how much an asset is worth or its impact, which is important for prioritization but does not describe a ledger of assets itself. An attack vector is a route an attacker might use to compromise systems, not a registry of assets. Availability risk refers to the potential impact on service availability, not the inventory of assets. So the term for the record used to track all relevant assets is asset inventory.

The concept being tested is keeping a centralized list of every asset an organization relies on. An asset inventory is exactly that—a maintained record of all relevant assets, such as hardware, software, data, networks, and even people or processes that have value or risk attached. Having this inventory is foundational for risk management because you can’t protect what you don’t know you have. It supports ownership assignment, classification, compliance, and tracking changes over time, and it enables effective threat modeling and control placement.

Asset value focuses on how much an asset is worth or its impact, which is important for prioritization but does not describe a ledger of assets itself. An attack vector is a route an attacker might use to compromise systems, not a registry of assets. Availability risk refers to the potential impact on service availability, not the inventory of assets.

So the term for the record used to track all relevant assets is asset inventory.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy