Expert Advice Community

Guest

Asset inventory content

  Quote
Guest
Guest user Created:   Oct 03, 2017 Last commented:   Oct 03, 2017

Asset inventory content

For the Inventory of assets, do I state what information in specifics I have on my computer, what information I have in paper documents in my cabinets, every software/application I have installed on my computer, and all company hardware assets I have? For every employee to name every document they have electronically and in paper form could take a very long time. Is this the case? What specific assets/information do I need to include in the inventory of assets?
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Oct 03, 2017

Answer: In the inventory of assets you should list anything inside the ISMS's scope that has value to the organization, generally grouping them in terms of processes, information and resources that support them (e.g., hardware, software, network, etc.). To avoid excessive, and sometimes unnecessary effort, if there is no specific reason to list an individual asset separately (e.g., the information on a employee's laptop), you can refer to them as general asset in your inventory (e.g., HR laptop, or corporate laptop, etc.). Regarding additional information, besides the identification o f the asset's owner, an organization is free to decide which information to include that in its evaluation will make the asset management easier (e.g., software version, asset's physical location, etc.).

This article will provide you further explanation about asset management:
- How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

These materials will also help you regarding asset management:
- Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
- Free online training ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Oct 03, 2017

Oct 03, 2017

Suggested Topics