Best practices for asset identification
Assign topic to the user
Answer:
I agree with you that asset identification in larger companies is a complex process that includes lots of preparation like gathering the lists of assets from various sources (e.g. accounting, legal, human resources, etc.).
However, in smaller companies it is often enough to interview the employees simply by asking them to list all the assets they use - e.g. what do they have on their desk and in file cabinets, which software and information do they have the access to through their computer, which equipment they use, etc.
This article may also help you: How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/
Comment as guest or Sign in
Feb 05, 2016