Guest user Created: Aug 23, 2019 Last commented: Aug 23, 2019

Asset inventory content

I have a question about column F of the asset inventory („implication / consequences“). The toolkit-comment says to transfer the data from the risk treatment directory. We don't have each asset from the asset inventory listed in the directory for risk treatment. Should column F only be filled in if it appears in the risk treatment directory?

0 0

Assign topic to the user

Select user

Expert

Rhand Leal Aug 23, 2019

Answer:

Sorry, but I think there is a misunderstanding here. The comment on column F of the asset inventory mentions the Risk Assessment Table, not the Risk Treatment, and on the Risk Assessment Table you have all assets considered in your ISMS scope.

As a last note, listing the consequences in the Asset inventory is not mandatory (it is only a best practice so you can quickly verify the impacts related to an asset without having to open another document.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Aug 23, 2019

Expert Advice Community