Expert Advice Community

Guest

Assets management

  Quote
Guest
Guest user Created:   May 20, 2022 Last commented:   May 20, 2022

Assets management

Buenas noches, tengo dudas con respecto a la gestion de activos, veo que dentro del paquete adqurido no vienen referenciados procedimientos de referencia en la gestión en sí, únicamente viene una politica de clasificación de activos y un inventario, ud tendrá un ejemplo de ellos y aclararme si es necesario un procedimiento la gestión de los activos y activos de información. Good evening, I have doubts regarding the management of assets, I see that within the purchased package there are no reference procedures referenced in the management itself, there is only an asset classification policy and an inventory, you will have an example of them and clarify if a procedure is necessary for the management of assets and information assets.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal May 20, 2022

I’m assuming that by management of assets you mean the process to of developing, operating, maintaining, upgrading, and disposing of assets in the most cost-effective manner. 

Considering that, please note that according to ISO 27001 it is not mandatory to document an asset management procedure.

Only rules applicable to users regarding the use of assets need to be documented, when control A.8.1.3 - Acceptable use of assets - is stated as applicable in the Statement of Applicability. The template which covers control A.8.1.3 is the IT Security Policy, which can be found in the folder 08 Annex A Security Controls >> A.8 Asset Management

To see an example of an asset management process according to ISO 20000, which is not mandatory for ISO 27001, please see:
- Asset Management Process (ISO 20000) https://advisera.com/20000academy/documentation/asset-management-process/

For further information, see:
- Asset management according to ISO 27001: How to handle an asset register / asset inventory https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

May 20, 2022

May 20, 2022

Suggested Topics

Guest user Created:   Dec 06, 2022 ISO 27001 & 22301
Replies: 1
0 0

Assets

Guest user Created:   Dec 05, 2022 ISO 27001 & 22301
Replies: 1
0 0

ISMS scope