ID.AM-01 requires organizations to maintain comprehensive inventories of all hardware assets under their control, including IT, IoT, OT, and mobile devices. This ongoing cataloging ensures visibility into the physical components that support operations, enabling better risk assessment and management. Accurate inventories are foundational to identifying vulnerabilities and protecting critical assets.

This subcategory supports proactive security by integrating real-time monitoring to detect and log new hardware, keeping the inventory current. It facilitates tracking of hardware locations and status, reducing the risk of unmanaged devices becoming entry points for threats. ID.AM-01 establishes a baseline for securing the organization’s physical infrastructure.