Guest
Owners of multiple assets
The Risk Assessment and Risk Treatment Methodology template states "When identifying assets, it is also necessary to identify their owners - the person or organizational unit responsible for each asset." When listing a laptop for example, should it be the person how uses the laptop (or who it's assigned to) or should it be a layer higher than that? My concern is that if we have 800+ employees, that we'd have to list all those individual laptops and their owners.
Assign topic to the user
ISO 22301 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 22301 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 22301 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Expert
Dejan Kosutic
Mar 11, 2016
Answer:
Asset owner should be a person who will be responsible for the information that is stored on that asset - so in case of laptops in your company, you could write that the owner is "A person who uses each laptop"; in some cases I've seen companies defining that the owner of all the laptops in a company is the IT department.
Comment as guest or Sign in
Mar 10, 2016
Mar 10, 2016
Mar 10, 2016