Guest
Asset inventory
When writing and preparing an asset inventory, should we write the name of risk owner/asset owner or the role?
Assign topic to the user
Expert
Rhand Leal
Jul 21, 2022
ISO 27001 does not prescribe the information to be included in an inventory of assets, so organizations can define them as best they fit their needs.
Both alternatives have disadvantages and advantages:
- by using the owner’s name, it is easier to identify who to contact, but the inventory will need to be updated every time the asset’s owner changes.
- by using the owner’s role changes in the inventory, you won’t need to update the inventory if a new person is in charge, but the inventory will become less personal, and you will need additional information to identify the person.
You also can use both information to write your inventory. The turnover rate in your organization will help you assess which approach is better for your organization
For further information, see:
- Asset management according to ISO 27001: How to handle an asset register/asset inventory https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/
Comment as guest or Sign in
Jul 21, 2022
Jul 21, 2022
Jul 21, 2022