63 lines
2.1 KiB
Markdown
63 lines
2.1 KiB
Markdown
Title: Asset Register Template
|
|
Document ID: [REG-ASSET-001]
|
|
Version: 0.1 Draft
|
|
Status: Draft
|
|
Owner: CISO (Paul Jenkins)
|
|
Approver: CISO (Paul Jenkins)
|
|
Classification: Internal
|
|
Effective date: [DD Month YYYY]
|
|
Review date: [DD Month YYYY]
|
|
|
|
# Asset Register Template
|
|
|
|
## Purpose
|
|
|
|
This template provides the structure for recording in-scope information and technology assets.
|
|
|
|
## Scope
|
|
|
|
This register applies to information assets, software assets, cloud services, repositories, endpoints, infrastructure components, and other assets relevant to the ISMS scope.
|
|
|
|
## Data Fields / Expected Columns
|
|
|
|
The asset register should record at least:
|
|
|
|
- asset ID
|
|
- asset name
|
|
- asset type
|
|
- description
|
|
- owner
|
|
- location or platform
|
|
- classification
|
|
- criticality
|
|
- environment
|
|
- supplier or hosting dependency
|
|
- backup or recovery requirement
|
|
- status
|
|
- review date
|
|
|
|
## Ownership
|
|
|
|
This register should be owned by [Role]. Asset owners are responsible for maintaining the accuracy of entries relevant to their assets.
|
|
|
|
## Update Frequency
|
|
|
|
The register should be updated when assets are created, changed, retired, transferred, or reassessed. It should be reviewed periodically for completeness and accuracy.
|
|
|
|
## Retention
|
|
|
|
Current and historical records should be retained in line with document and records retention requirements where needed for auditability or lifecycle traceability.
|
|
|
|
## Template Table
|
|
|
|
| Asset ID | Asset Name | Asset Type | Description | Owner | Location / Platform | Classification | Criticality | Environment | Supplier / Hosting Dependency | Recovery Requirement | Status | Review Date |
|
|
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|
|
| [A-001] | [Asset name] | [Application / Data / Endpoint / Cloud Service / Repository] | [Description] | [Role] | [Platform / location] | [Classification] | [Low/Medium/High] | [Prod / Non-Prod] | [Supplier / Provider] | [Yes / No / Details] | [Active / Retired] | [DD Month YYYY] |
|
|
|
|
## Related Documents
|
|
|
|
- Asset Management and Acceptable Use Policy
|
|
- Data Classification and Handling Policy
|
|
- Backup and Recovery Policy
|
|
- Risk Register Template
|