Guest user Created: Apr 11, 2016 Last commented: Apr 11, 2016

Including employees in the inventory of assets

I need to ask about the inventory of the assets. It says I need to copy the assets from Risk Assessment Table. In Risk Assessment Table, I had mention employees also as an asset. So, in Inventory, do I need to mention employees too?

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Apr 11, 2016

Answer:

In its control A.8.1.1 ISO 27001 requires you to develop inventory of assets with all assets - since your employees are an asset, you should list them in the inventory. However, the standard doesn't say you need to have only one inventory, so if you already listed your employees in some human resources database, then you can simply refer to that database as the list of your employees.

See also this article: How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 11, 2016

Expert Advice Community