IDE-01 Asset identification

two actionsAlso in ASD Essentials for enterprise IT

Know every OT asset you have. Keep a central, current record that treats infrastructure, software, identities, credentials and data as separate assets. Use an approved inventory with automated discovery that records where each asset is, what it does, how critical it is and its known weaknesses.

Reviewed 18 October 2026 · Current to ASD's Essentials for OT, published 15 October 2026

The principle

Systems (infrastructure, operating systems, applications, identities, credentials and data) are continually and centrally identified and documented.

ASD, Information Security Manual (ISM), Principle IDE-01

The two actions

ASD's actions are quoted as published in Essentials for OT. ASD has not given them IDs, so they are numbered by position.

Action 1 of 2
Use an approved asset inventory mechanism that supports automated discovery to detect new and changed assets, recording physical and logical location, role, criticality, dependencies, known vulnerabilities and existing compensating controls.
In plain English: Use an approved inventory that automatically finds new and changed assets. Record each asset's physical and network location, role, criticality, dependencies, known weaknesses and compensating controls (other safeguards).
Domains
Visibility and response
Action 2 of 2
Continuously identify and document infrastructure, operating systems, applications, identities, credentials and data as distinct assets.
In plain English: Continuously find and record infrastructure, operating systems, applications, identities, credentials (such as passwords and keys) and data. Treat each as a separate asset.
Domains
Critical processes and services
Boundary services
Identity services
Privileged environments
Business systems