ISO/IEC 19770-1:2017
Information technology — IT asset management — Part 1: IT asset management systems — Requirements
ISO/IEC 19770-1:2017 specifies requirements for an IT asset management system within the context of the organization.
ISO/IEC 19770-1:2017 can be applied to all types of IT assets and by all types and sizes of organizations.
NOTE 1 This document is intended to be used for managing IT assets in particular, but it can also be applied to other asset types. It can be suitable, in whole or in part, for managing embedded software and firmware, however its use for these purposes has not been determined. It is not intended for managing information assets per se, i.e. it is not intended for managing information as an asset independent of hardware and software assets. Certain types of data and information are covered, such as data and information about IT assets in scope, and depending on how the scope is defined, it can cover digital information content assets. See the Introduction for an explanation about IT assets.
NOTE 2 This document does not specify financial, accounting, or technical requirements for managing specific IT asset types.
NOTE 3 For the purposes of this document, the term "IT asset management system" is used to refer to a management system for IT asset management.
ISO/IEC 19770-1:2017 is a discipline-specific extension of ISO 55001:2014, with changes, and is not a sector-specific application of that International Standard. ISO 55001:2014 is intended to be used for managing physical assets in particular, but it can also be applied to other asset types. This document specifies requirements for the management of IT assets which are additional to those specified in ISO 55001:2014. Conformance to this document does not imply conformance to ISO 55001:2014.
ISO/IEC 19770-1:2017 can be used by internal and external parties to assess the organization's ability to meet the organization's own IT asset management requirements.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$343.00 NZD
|
|
| HardCopy |
$389.00 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
1.1 Purpose
1.2 Field of application
1.3 Limitations
2 Normative references
3 Terms and definitions
4 Context of the organization
4.1 Understanding the organization and its context
4.2 Understanding the needs and expectations of stakeholders
4.3 Determining the scope of the IT asset management system
4.4 IT asset management system
5 Leadership
5.1 Leadership and commitment
5.2 Policy
5.3 Organizational roles, responsibilities and authorities
6 Planning
6.1 Actions to address risks and opportunities for the IT asset management system
6.1.1 General
6.1.2 IT asset risk assessment
6.1.3 IT asset risk treatment
6.2 IT asset management objectives and planning to achieve them
6.2.1 IT asset management operation process specification
6.2.2 IT asset management objectives for operation processes
6.2.3 Overall IT asset management objectives
6.2.4 Planning to achieve IT asset management objectives
7 Support
7.1 Resources
7.2 Competence
7.3 Awareness
7.4 Communication
7.5 Information requirements
7.6 Documented information
7.6.1 General
7.6.2 Traceability of ownership and responsibility
7.6.3 Audit trails of authorizations and execution of authorizations
7.6.4 Creating and updating
7.6.5 Control of documented information
8 Operation
8.1 Operational planning and control
8.2 Management of change
8.3 Core data management
8.4 License management
8.5 Security management
8.6 Other processes
8.7 Outsourcing and services
8.8 Mixed responsibilities between the organization and its personnel
9 Performance evaluation
9.1 Monitoring, measurement, analysis and evaluation
9.2 Internal audit
9.3 Management review
10 Improvement
10.1 Nonconformity and corrective action
10.2 Preventive action
10.3 Continual improvement
Annex A (normative) IT asset management operation processes and objectives
Annex B (informative) IT asset management tiers
Annex C (informative) Characteristics of IT Assets
Annex D (informative) Changes from ISO 55001
Bibliography
Previous versions
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS 14756:2001
Information technology - Measurement and rating of performance of computer-based software systems
-
AS/NZS 15271:1999
Guide for AS/NZS ISO/IEC 12207 (Software life cycle processes)
-
AS/NZS ISO/IEC 12207:2013
Systems and software engineering - Software life cycle processes -
AS/NZS ISO/IEC 13235.1:2006
Information technology - Open Distributed Processing - Trading function - Specification
Foreword
Introduction
1 Scope
1.1 Purpose
1.2 Field of application
1.3 Limitations
2 Normative references
3 Terms and definitions
4 Context of the organization
4.1 Understanding the organization and its context
4.2 Understanding the needs and expectations of stakeholders
4.3 Determining the scope of the IT asset management system
4.4 IT asset management system
5 Leadership
5.1 Leadership and commitment
5.2 Policy
5.3 Organizational roles, responsibilities and authorities
6 Planning
6.1 Actions to address risks and opportunities for the IT asset management system
6.1.1 General
6.1.2 IT asset risk assessment
6.1.3 IT asset risk treatment
6.2 IT asset management objectives and planning to achieve them
6.2.1 IT asset management operation process specification
6.2.2 IT asset management objectives for operation processes
6.2.3 Overall IT asset management objectives
6.2.4 Planning to achieve IT asset management objectives
7 Support
7.1 Resources
7.2 Competence
7.3 Awareness
7.4 Communication
7.5 Information requirements
7.6 Documented information
7.6.1 General
7.6.2 Traceability of ownership and responsibility
7.6.3 Audit trails of authorizations and execution of authorizations
7.6.4 Creating and updating
7.6.5 Control of documented information
8 Operation
8.1 Operational planning and control
8.2 Management of change
8.3 Core data management
8.4 License management
8.5 Security management
8.6 Other processes
8.7 Outsourcing and services
8.8 Mixed responsibilities between the organization and its personnel
9 Performance evaluation
9.1 Monitoring, measurement, analysis and evaluation
9.2 Internal audit
9.3 Management review
10 Improvement
10.1 Nonconformity and corrective action
10.2 Preventive action
10.3 Continual improvement
Annex A (normative) IT asset management operation processes and objectives
Annex B (informative) IT asset management tiers
Annex C (informative) Characteristics of IT Assets
Annex D (informative) Changes from ISO 55001
Bibliography