ISO/IEC 19770-1:2017

Information technology — IT asset management — Part 1: IT asset management systems — Requirements

ISO/IEC 19770-1:2017 specifies requirements for an IT asset management system within the context of the organization. ISO/IEC 19770-1:2017 can be applied to all types of IT assets and by all types and sizes of organizations. NOTE 1 This document is intended to be used for managing IT assets in particular, but it can also be applied to other asset types. It can be suitable, in whole or in part, for managing embedded software and firmware, however its use for these purposes has not been determined. It is not intended for managing information assets per se, i.e. it is not intended for managing information as an asset independent of hardware and software assets. Certain types of data and information are covered, such as data and information about IT assets in scope, and depending on how the scope is defined, it can cover digital information content assets. See the Introduction for an explanation about IT assets. NOTE 2 This document does not specify financial, accounting, or technical requirements for managing specific IT asset types. NOTE 3 For the purposes of this document, the term "IT asset management system" is used to refer to a management system for IT asset management. ISO/IEC 19770-1:2017 is a discipline-specific extension of ISO 55001:2014, with changes, and is not a sector-specific application of that International Standard. ISO 55001:2014 is intended to be used for managing physical assets in particular, but it can also be applied to other asset types. This document specifies requirements for the management of IT assets which are additional to those specified in ISO 55001:2014. Conformance to this document does not imply conformance to ISO 55001:2014. ISO/IEC 19770-1:2017 can be used by internal and external parties to assess the organization's ability to meet the organization's own IT asset management requirements.

Technologies de l'information — Gestion de biens de logiciel — Partie 1: Titre manque

General Information

• Status: Published
• Publication Date: 06-Dec-2017
• ICS: 03.100.70 - Management systems
• ICS: 35.080 - Software
• Technical Committee: ISO/IEC JTC 1/SC 7 - Software and systems engineering
• Drafting Committee: ISO/IEC JTC 1/SC 7/WG 21 - Information technology asset management
• Current Stage: 9060 - Close of review
• Start Date: 03-Jun-2028

Relations

• Amended By: ISO/IEC 19770-1:2017/Amd 1:2024 - Information technology — IT asset management — Part 1: IT asset management systems — Requirements — Amendment 1: Climate action changes
• Effective Date: 18-Nov-2023
• Revises: ISO/IEC 19770-1:2012 - Information technology — Software asset management — Part 1: Processes and tiered assessment of conformance
• Effective Date: 05-Nov-2015

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 19770-1
Third edition
2017-12
Information technology — IT asset
management —
Part 1:
IT asset management systems —
Requirements
Technologies de l'information — Gestion des actifs logiciels —
Partie 1: Procédés et évaluation progressive de la conformité
Reference number
ISO/IEC 19770-1:2017(E)
©
ISO/IEC 2017

---------------------- Page: 1 ----------------------
ISO/IEC 19770-1:2017(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2017, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO/IEC 2017 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 19770-1:2017(E)

Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
1.1 Purpose . 1
1.2 Field of application . 1
1.3 Limitations . 1
2 Normative references . 2
3 Terms and definitions . 2
4 Context of the organization .12
4.1 Understanding the organization and its context .12
4.2 Understanding the needs and expectations of stakeholders .12
4.3 Determining the scope of the IT asset management system .13
4.4 IT asset management system .13
5 Leadership .13
5.1 Leadership and commitment .13
5.2 Policy .14
5.3 Organizational roles, responsibilities and authorities.14
6 Planning .15
6.1 Actions to address risks and opportunities for the IT asset management system .15
6.1.1 General.
...