Equipment maintenance

frameworkISO/IEC 27001:2022 sectionA.7 Physical controls csf 2.0ID.AM-08 PR.IR-02 topics— frameworks2 0 0

Official text · not licensableTitle: Equipment maintenance. The control text is ISO's copyright; see ISO/IEC 27001:2022.

gap from ISO 27001 → gap to ISO 27001 →

Wrong or missing mapping? Report it

Equivalents of A.7.13 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	ID.AM-08 PR.IR-02	Systems, hardware, software, services, and data are managed throughout their life cycles; The organization's technology assets are protected from environmental threats	Loosely related	No mapping. Only shares CSF ID.AM-08, PR.IR-02: related, not a mapping
CIS v8.1	CIS 1.1 CIS 3.5 CIS 1.2 CIS 1.3	Establish and Maintain Detailed Enterprise Asset Inventory; Securely Dispose of Data…	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping +5 more loosely related (not mappings) CIS 1.4 Use Dynamic Host Configuration Protocol (DHCP) Logging to Update Enterprise Asset Inventory Loosely related Only shares CSF ID.AM-08: related, not a mapping CIS 1.5 Use a Passive Asset Discovery Tool Loosely related Only shares CSF ID.AM-08: related, not a mapping CIS 2.3 Address Unauthorized Software Loosely related Only shares CSF ID.AM-08: related, not a mapping CIS 2.4 Utilize Automated Software Inventory Tools Loosely related Only shares CSF ID.AM-08: related, not a mapping …and 1 more in the downloads
SOC 2	CC6.1 CC6.4	Logical access security over information assets; Physical access restrictions	Loosely related	No mapping. Only shares CSF ID.AM-08, PR.IR-02: related, not a mapping
PCI DSS	6.2.1 6.2.2 6.2.3 6.2.3.1	Bespoke and custom software developed securely; Developers trained in secure software development…	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping +12 more loosely related (not mappings) 6.2.4 Coding techniques prevent common software attacks Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.3.1 Vulnerabilities identified and risk-ranked Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.3.3 Security patches installed promptly Loosely related Only shares CSF ID.AM-08: related, not a mapping 9.1.1 Physical security policies documented and kept current Loosely related Only shares CSF PR.IR-02: related, not a mapping …and 8 more in the downloads
CMMC	CA.L2-3.12.4 MA.L2-3.7.1 MA.L2-3.7.3 SC.L2-3.13.2	System Security Plan; Perform Maintenance…	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping +1 more loosely related (not mappings) PE.L2-3.10.6 Alternative Work Sites Loosely related Only shares CSF PR.IR-02: related, not a mapping
800-53	MA-2 MA-6	Controlled Maintenance; Timely Maintenance	Crosswalk	NIST SP 800-53 → ISO 27001 mapping 23 loosely related (not mappings) CM-9 Configuration Management Plan Loosely related Only shares CSF ID.AM-08: related, not a mapping CM-13 Data Action Mapping Loosely related Only shares CSF ID.AM-08: related, not a mapping CP-2 Contingency Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-9 Power Equipment and Cabling Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-10 Emergency Shutoff Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-11 Emergency Power Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-12 Emergency Lighting Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-13 Fire Protection Loosely related Only shares CSF PR.IR-02: related, not a mapping …and 15 more in the downloads
HIPAA	§164.310(a)(2)(ii)§164.308(a)(1)(ii)(B)§164.308(a)(7)§164.308(a)(7)(ii)(B)	Facility Security Plan; Risk Management…	Loosely related	No mapping. Only shares CSF ID.AM-08, PR.IR-02: related, not a mapping +18 more loosely related (not mappings) §164.308(a)(7)(ii)(C) Emergency Mode Operation Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(D) Testing and Revision Procedure Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(E) Applications and Data Criticality Analysis Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(b)(4) Written Contract or Other Arrangement Loosely related Only shares CSF ID.AM-08: related, not a mapping …and 14 more in the downloads
GDPR	Art.30(1)	Records of processing activities	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping
NIS2	6.4	Change management, repairs and maintenance	Crosswalk	ENISA NIS2 → ISO 27001 mapping 3 loosely related (not mappings) 6.2 Secure development life cycle Loosely related Only shares CSF ID.AM-08: related, not a mapping 12.4 Asset inventory Loosely related Only shares CSF ID.AM-08: related, not a mapping 13.2 Protection against physical and environmental threats Loosely related Only shares CSF PR.IR-02: related, not a mapping
Essential Eight	ISM-1807	An automated method of asset discovery is used at least fortnightly to support the…	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping
DORA	Art.6(2)Art.8(1)Art.8(4)Art.8(6)	ICT risk management framework; Identification…	Loosely related	No mapping. Only shares CSF PR.IR-02, ID.AM-08: related, not a mapping +1 more loosely related (not mappings) Art.9(4)(c) Protection and prevention Loosely related Only shares CSF PR.IR-02: related, not a mapping
CPS 234	Para 20	Classify information assets by criticality and sensitivity	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping
Cyber Essentials	CE 3	Security Update Management	Loosely related	No mapping. Only shares CSF ID.AM-08: related, not a mapping

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.