Secure disposal or re-use of equipment

frameworkISO/IEC 27001:2022 sectionA.7 Physical controls csf 2.0ID.AM-08 PR.IR-02 topicsAsset Management frameworks7 6 0

Official text · not licensableTitle: Secure disposal or re-use of equipment. The control text is ISO's copyright; see ISO/IEC 27001:2022.

gap from ISO 27001 → gap to ISO 27001 →

Wrong or missing mapping? Report it

Equivalents of A.7.14 in other frameworks
Framework	Requirement	Title	Link	Source / reason
NIST CSF 2.0	ID.AM-01 ID.AM-02 ID.AM-04 ID.AM-08	Inventories of hardware managed by the organization are maintained; Inventories of software, services, and systems managed by the organization are maintained…	Crosswalk	Same topic: Asset Management 1 loosely related (not mappings) PR.IR-02 The organization's technology assets are protected from environmental threats Loosely related Only shares CSF PR.IR-02: related, not a mapping
CIS v8.1	CIS 1.1 CIS 2.1 CIS 1.2 CIS 1.3 CIS 1.4 CIS 1.5 CIS 2.3 CIS 2.4 CIS 16.4	Establish and Maintain Detailed Enterprise Asset Inventory; Establish and Maintain a Software Inventory…	Crosswalk	Same topic: Asset Management 1 loosely related (not mappings) CIS 3.5 Securely Dispose of Data Loosely related Only shares CSF ID.AM-08: related, not a mapping
SOC 2	CC6.1 C1.2	Logical access security over information assets; Disposing of confidential information	Editorial	Same topic: Asset Management (editorial pick) ControlMapping editorial: Disposing of confidential information: information deletion (A.8.10) and secure disposal of equipment (A.7.14). 1 loosely related (not mappings) CC6.4 Physical access restrictions Loosely related Only shares CSF PR.IR-02: related, not a mapping
PCI DSS	6.3.2 12.5.1	Inventory of custom software and its components; Inventory of in-scope system components	Crosswalk	Same topic: Asset Management 16 loosely related (not mappings) 6.2.1 Bespoke and custom software developed securely Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.2.2 Developers trained in secure software development Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.2.3 Custom code reviewed before release Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.2.3.1 Manual code reviews approved by someone else Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.2.4 Coding techniques prevent common software attacks Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.3.1 Vulnerabilities identified and risk-ranked Loosely related Only shares CSF ID.AM-08: related, not a mapping 6.3.3 Security patches installed promptly Loosely related Only shares CSF ID.AM-08: related, not a mapping 9.1.1 Physical security policies documented and kept current Loosely related Only shares CSF PR.IR-02: related, not a mapping …and 8 more in the downloads
CMMC	CM.L2-3.4.1	System Baselining	Crosswalk	Same topic: Asset Management 5 loosely related (not mappings) CA.L2-3.12.4 System Security Plan Loosely related Only shares CSF ID.AM-08: related, not a mapping MA.L2-3.7.1 Perform Maintenance Loosely related Only shares CSF ID.AM-08: related, not a mapping MA.L2-3.7.3 Equipment Sanitization Loosely related Only shares CSF ID.AM-08: related, not a mapping SC.L2-3.13.2 Security Engineering Loosely related Only shares CSF ID.AM-08: related, not a mapping PE.L2-3.10.6 Alternative Work Sites Loosely related Only shares CSF PR.IR-02: related, not a mapping
800-53	CM-8 PM-5 MP-6	System Component Inventory; System Inventory…	Crosswalk	Same topic: Asset Management NIST SP 800-53 → ISO 27001 mapping 25 loosely related (not mappings) CM-9 Configuration Management Plan Loosely related Only shares CSF ID.AM-08: related, not a mapping CM-13 Data Action Mapping Loosely related Only shares CSF ID.AM-08: related, not a mapping CP-2 Contingency Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping MA-2 Controlled Maintenance Loosely related Only shares CSF ID.AM-08: related, not a mapping MA-6 Timely Maintenance Loosely related Only shares CSF ID.AM-08: related, not a mapping PE-9 Power Equipment and Cabling Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-10 Emergency Shutoff Loosely related Only shares CSF PR.IR-02: related, not a mapping PE-11 Emergency Power Loosely related Only shares CSF PR.IR-02: related, not a mapping …and 17 more in the downloads
HIPAA	§164.310(d)§164.310(d)(2)(iii)	Device and Media Controls; Accountability	Crosswalk	Same topic: Asset Management 22 loosely related (not mappings) §164.310(a)(2)(ii) Facility Security Plan Loosely related Only shares CSF ID.AM-08, PR.IR-02: related, not a mapping §164.308(a)(1)(ii)(B) Risk Management Loosely related Only shares CSF ID.AM-08: related, not a mapping §164.308(a)(7) Contingency Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(B) Disaster Recovery Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(C) Emergency Mode Operation Plan Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(D) Testing and Revision Procedure Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(a)(7)(ii)(E) Applications and Data Criticality Analysis Loosely related Only shares CSF PR.IR-02: related, not a mapping §164.308(b)(4) Written Contract or Other Arrangement Loosely related Only shares CSF ID.AM-08: related, not a mapping …and 14 more in the downloads
GDPR	Art.30(1)	Records of processing activities	Editorial	Same topic: Asset Management (editorial pick)
NIS2	12.4	Asset inventory	Crosswalk	Same topic: Asset Management 2 loosely related (not mappings) 6.2 Secure development life cycle Loosely related Only shares CSF ID.AM-08: related, not a mapping 13.2 Protection against physical and environmental threats Loosely related Only shares CSF PR.IR-02: related, not a mapping
Essential Eight	ISM-1807	An automated method of asset discovery is used at least fortnightly to support the…	Editorial	Same topic: Asset Management (editorial pick)
DORA	Art.8(1)Art.8(4)Art.8(6)	Identification; Identification…	Editorial	Same topic: Asset Management (editorial pick) 2 loosely related (not mappings) Art.6(2) ICT risk management framework Loosely related Only shares CSF PR.IR-02: related, not a mapping Art.9(4)(c) Protection and prevention Loosely related Only shares CSF PR.IR-02: related, not a mapping
CPS 234	Para 20	Classify information assets by criticality and sensitivity	Editorial	Same topic: Asset Management (editorial pick)
Cyber Essentials	CE 3	Security Update Management	Editorial	Same topic: Asset Management (editorial pick)

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.