Entity maintains and periodically reviews the inventory of systems which are critical to security commitments and requirements