Domains

AM

Asset Management

12 criteria, 26 basic and 11 additional sub-criteria

• AM-01Asset Management Framework3 sub-criteria: 1 basic, 2 additional, new in C5:2026
• AM-02Asset Inventory5 sub-criteria
• AM-03Hardware Asset Inventory1 sub-criterion, new in C5:2026
• AM-04Software Asset Inventory2 sub-criteria: 1 basic, 1 additional, new in C5:2026
• AM-05Policy for the Proper and Secure Use of Assets2 sub-criteria
• AM-06Commissioning of Hardware2 sub-criteria
• AM-07Decommissioning of Hardware4 sub-criteria: 2 basic, 2 additional
• AM-08Commitment to Proper Use, Safe and Secure Handling and Return of Assets3 sub-criteria
• AM-09Asset Classification and Labelling8 sub-criteria: 4 basic, 4 additional, with customer criteria
• AM-10Protection of Hardware on Hold2 sub-criteria: 1 basic, 1 additional, new in C5:2026
• AM-11Transfer of Hardware3 sub-criteria, new in C5:2026
• AM-12Removable Media and Endpoint Devices2 sub-criteria: 1 basic, 1 additional, new in C5:2026

BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources