4Operate

ISO 27001Governed Resource

Governed Resource

Purpose

An asset, system, facility, service or process the ISMS governs, with classification and ownership.

Role

ISO/IEC 27001 Annex A (inventory, acceptable use, classification, suppliers) assumes a catalogue of information assets and related resources. Ten Factor governs activities; this artefact names the resources those activities run on or produce. ISO/IEC 42001 specialises the same concern into AI System, Dataset and Tool Resource rather than a single resource type.

This page is a stub: fields, examples and schema are still to be specified.

Links upstream

• AIMS Scope
• Party Register

Links downstream

• Sensitive Activity
• Risk Assessment
• Capability
• Incident
• AI System
• Dataset
• Tool Resource

Related factors

• Govern Sensitive Activities
• Govern Dependencies
• Build a Governance Twin

References

• ISO/IEC 27001 Analysis — Annex A.5.9–A.5.14
• ISO/IEC 27001 Guidance Catalog (iso27001-A.5.9)