ISMS/04-registers/asset-register-template.md

Title: Asset Register Template Document ID: [REG-ASSET-001] Version: 0.1 Draft Status: Draft Owner: CISO (Paul Jenkins) Approver: CISO (Paul Jenkins) Classification: Internal Effective date: [DD Month YYYY] Review date: [DD Month YYYY]

Asset Register Template

Purpose

This template provides the structure for recording in-scope information and technology assets.

Scope

This register applies to information assets, software assets, cloud services, repositories, endpoints, infrastructure components, and other assets relevant to the ISMS scope.

Data Fields / Expected Columns

The asset register should record at least:

• asset ID
• asset name
• asset type
• description
• owner
• location or platform
• classification
• criticality
• environment
• supplier or hosting dependency
• backup or recovery requirement
• status
• review date

Ownership

This register should be owned by [Role]. Asset owners are responsible for maintaining the accuracy of entries relevant to their assets.

Update Frequency

The register should be updated when assets are created, changed, retired, transferred, or reassessed. It should be reviewed periodically for completeness and accuracy.

Retention

Current and historical records should be retained in line with document and records retention requirements where needed for auditability or lifecycle traceability.

Template Table

Asset ID	Asset Name	Asset Type	Description	Owner	Location / Platform	Classification	Criticality	Environment	Supplier / Hosting Dependency	Recovery Requirement	Status	Review Date
[A-001]	[Asset name]	[Application / Data / Endpoint / Cloud Service / Repository]	[Description]	[Role]	[Platform / location]	[Classification]	[Low/Medium/High]	[Prod / Non-Prod]	[Supplier / Provider]	[Yes / No / Details]	[Active / Retired]	[DD Month YYYY]

Related Documents

• Asset Management and Acceptable Use Policy
• Data Classification and Handling Policy
• Backup and Recovery Policy
• Risk Register Template