Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

Treating server as a single asset or viewing it separately for hardware and soft

If you identified an asset for example, an application on a server... Do you have to separate two assets or to treat as an single asset?

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

Like this:

Asset 1: Application
Asset 2: server on which the application runs

Asset: Application / server

Answer:

ISO 27001 allows you to do it both ways. First approach you mentioned is better if you want to get more precise results during the risk assessment, whereas the second approach is probably better for smaller companies where you want to finish your risk assessment quickly.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community