Expert Advice Community

Guest

Best practices for asset identification

  Quote
Guest
Guest user Created:   Feb 05, 2016 Last commented:   Feb 05, 2016

Best practices for asset identification

My question was about best practicies of assets identification, and in my practice, interviewing with personal is almost the last part of the long and complex process of assets identification. I was wondering what is your opinion about it and your methods of assets identification.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Dejan Kosutic Feb 05, 2016

Answer:

I agree with you that asset identification in larger companies is a complex process that includes lots of preparation like gathering the lists of assets from various sources (e.g. accounting, legal, human resources, etc.).

However, in smaller companies it is often enough to interview the employees simply by asking them to list all the assets they use - e.g. what do they have on their desk and in file cabinets, which software and information do they have the access to through their computer, which equipment they use, etc.

This article may also help you: How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Feb 05, 2016

Feb 05, 2016