Inventory of Assets template
I was wondering if you can help me with the document "A.8.1_Inventory_of_Assets_27001_EN". I am wondering what goes under "Impact" as this part is not clearly explained.
Assign topic to the user
Please note that this template is used after the development of the risk assessment and risk treatment process. The column "Impact" in this template reflects the value of the impact identified during the risk assessment step, so you only need to copy the impact information from the risk assessment table related to the asset you are listing (in case there are multiple values of impact for an asset, please include the highest value).
These articles will provide you a further explanation about risk assessment and inventory of assets:
- ISO 27001 risk assessment: How to match assets, threats, and vulnerabilities https://advisera.com/27001academy/knowledgebase/iso-27001-risk-assessment-how-to-match-assets-threats-and-vulnerabilities/
- How to assess consequences and likelihood in ISO 27001 risk analysis https://advisera.com/27001academy/iso-27001-risk-assessment-treatment-management/#assessment
- How to handle Asset register (Asset inventory) according to ISO 27001 https://advisera.com/27001academy/knowledgebase/how-to-handle-asset-register-asset-inventory-according-to-iso-27001/
Thank you for getting in touch.
I am still not clear on the answer. My interpretation of the answer provided is to take a score of either the consequence or the final risk score (based on the likelihood and consequence).
Can you please confirm which value I will be using?
For the value on the "Impact" column in the Inventory of Assets template, you must copy the value identified in the "Consequence" column in the Risk Assessment Table template.
Comment as guest or Sign in
Jun 09, 2020