CISSP: Certified Information Systems Security Professional

An inventory list is the starting record for identifying the assets that require protection. Asset valuation and risk-based selection of security standards or deterrent controls depend on knowing which assets exist. NIST guidance likewise identifies inventorying assets as the first step before assessing their risk and determining protections.