SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Use promo code:
SPRING30

Expert Advice Community

Difference between Risk assessment table and Asset register

  Quote
Created:   Aug 04, 2020 Last commented:   Aug 04, 2020

Difference between Risk assessment table and Asset register

I would like to know what is the difference between the Risk assessment table and Asset register, please?

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Aug 04, 2020

The Risk Assessment Table is a record required to fulfill a mandatory clause of ISO 27001 (6.1.2 - Information Security Risk Assessment), and it includes the risks related to the assets you identify that are relevant to information security.

The Asset Register is a record required only if control A.8.1.1 (Inventory of Assets) is applicable, and it includes relevant information about assets, like its location, owner, version, etc. For smaller companies the Risk Assessment Table can be used as Asset register since it contains similar information.

 This article will provide you a further explanation about asset register:
- How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

These materials will also help you regarding risk assessment and risk register:
- Book Secure & Simple: A Small-Business Guide to Implementing ISO 27001 On Your Own https://advisera.com/books/secure-and-simple-a-small-business-guide-to-implementing-iso-27001-on-your-own/
- ISO 27001 Foundations Course https://advisera.com/training/iso-27001-foundations-course/

Quote
0 1

Comment as guest or Sign in

HTML tags are not allowed

Aug 04, 2020

Aug 04, 2020