Initial commit

04-registers/asset-register-template.md

@@ -0,0 +1,62 @@
+Title: Asset Register Template
+Document ID: [REG-ASSET-001]
+Version: 0.1 Draft
+Status: Draft
+Owner: CISO (Paul Jenkins)
+Approver: CISO (Paul Jenkins)
+Classification: Internal
+Effective date: [DD Month YYYY]
+Review date: [DD Month YYYY]
+
+# Asset Register Template
+
+## Purpose
+
+This template provides the structure for recording in-scope information and technology assets.
+
+## Scope
+
+This register applies to information assets, software assets, cloud services, repositories, endpoints, infrastructure components, and other assets relevant to the ISMS scope.
+
+## Data Fields / Expected Columns
+
+The asset register should record at least:
+
+- asset ID
+- asset name
+- asset type
+- description
+- owner
+- location or platform
+- classification
+- criticality
+- environment
+- supplier or hosting dependency
+- backup or recovery requirement
+- status
+- review date
+
+## Ownership
+
+This register should be owned by [Role]. Asset owners are responsible for maintaining the accuracy of entries relevant to their assets.
+
+## Update Frequency
+
+The register should be updated when assets are created, changed, retired, transferred, or reassessed. It should be reviewed periodically for completeness and accuracy.
+
+## Retention
+
+Current and historical records should be retained in line with document and records retention requirements where needed for auditability or lifecycle traceability.
+
+## Template Table
+
+| Asset ID | Asset Name | Asset Type | Description | Owner | Location / Platform | Classification | Criticality | Environment | Supplier / Hosting Dependency | Recovery Requirement | Status | Review Date |
+| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
+| [A-001] | [Asset name] | [Application / Data / Endpoint / Cloud Service / Repository] | [Description] | [Role] | [Platform / location] | [Classification] | [Low/Medium/High] | [Prod / Non-Prod] | [Supplier / Provider] | [Yes / No / Details] | [Active / Retired] | [DD Month YYYY] |
+
+## Related Documents
+
+- Asset Management and Acceptable Use Policy
+- Data Classification and Handling Policy
+- Backup and Recovery Policy
+- Risk Register Template