Inventory of assets
Assign topic to the user
In that for example I bundled laptops together in assest name and category of IT equipment as our main risks/concerns were loss or theft during travel and hence our treatment was MDM and encryption of drives. However I believe in the inventory table I need to list each laptop the company owns, every member of staff for example? Please confirm as if that is the case I have my work cut out.
Thanks in advance for your help
Answer: There is no need to mention specific laptops and staff members in the inventory if you are applying the same controls for all laptops. You can use a general asset description like "corporate laptop" and as asset owner you can define "laptop user" for example.
This article will provide you further explanation about inventory of assets:
- How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/
Comment as guest or Sign in
Jun 01, 2017