Guest user Created: Mar 11, 2016 Last commented: Mar 11, 2016

Owners of multiple assets

The Risk Assessment and Risk Treatment Methodology template states "When identifying assets, it is also necessary to identify their owners - the person or organizational unit responsible for each asset." When listing a laptop for example, should it be the person how uses the laptop (or who it's assigned to) or should it be a layer higher than that? My concern is that if we have 800+ employees, that we'd have to list all those individual laptops and their owners.

0 0

Assign topic to the user

Select user

Expert

Dejan Kosutic Mar 11, 2016

Answer:

Asset owner should be a person who will be responsible for the information that is stored on that asset - so in case of laptops in your company, you could write that the owner is "A person who uses each laptop"; in some cases I've seen companies defining that the owner of all the laptops in a company is the IT department.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Mar 10, 2016

Expert Advice Community