The records kept of all security controls applied to a particular information asset including assessments and reviews of those controls.
The records kept of all security controls applied to a particular information asset including assessments and reviews of those controls.