Expert Advice Community

Guest

Inventory of assets

  Quote
Guest
Guest user Created:   Jun 01, 2017 Last commented:   Jun 01, 2017

Inventory of assets

We are finally nearing our initial exercise to complete the templates from your company. I am not at the point of the Inventory of assets. I have a question tho as it mentions the risk assessment table.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Jun 01, 2017

In that for example I bundled laptops together in assest name and category of IT equipment as our main risks/concerns were loss or theft during travel and hence our treatment was MDM and encryption of drives. However I believe in the inventory table I need to list each laptop the company owns, every member of staff for example? Please confirm as if that is the case I have my work cut out.
Thanks in advance for your help

Answer: There is no need to mention specific laptops and staff members in the inventory if you are applying the same controls for all laptops. You can use a general asset description like "corporate laptop" and as asset owner you can define "laptop user" for example.

This article will provide you further explanation about inventory of assets:
- How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jun 01, 2017

Jun 01, 2017

Suggested Topics