Skip to content
  • There are no suggestions because the search field is empty.

How to work with assets

Assets overview

Where to find it in ISOPlanner: https://portal.isoplanner.app/assets/overview

Use the Assets menu in ISOPlanner to describe the assets in your organization. We advise to create assets only on a level that you either want to classify (apply Classification labels) as a group or that you want to identify a risk for. In other words, don’t create an asset for a specific laptop – instead create ‘Laptops’ as an asset. If you see specific risks for a specific type of laptops, say “Developer laptops”, then create those as a separate asset. Then you can also classify those developer laptops in another way.

We advise to also create assets for each supplier or supplier group, as long as they can be classified as a group. Of course, they must have a relationship with the compliance framework you are implementing. In most cases, don’t add the bakery :).

If you need more control over your supply chain, consider upgrading your ISOPlanner subscription to “Business”. You can create and visualize supply chains, create a file with contracts and an SLA for example and create tasks to plan and execute the annual assessment. Please check supply chain management.
Examples of assets are:

  • Laptops
  • Customer email addresses
  • Customer credit card numbers
  • CRM application
  • Server DL-480
  • Cloud suppliers
  • Microsoft
  • Office location X
  • Cabinet with physical documents
  • Alarm systems
  • Production line A
  • Protected logo’s
  • Hardware vendors

 

Properties

Name

Give the asset a short and descriptive name. For more details on the asset, use the description field (which supports text styles).

Code

The code of the asset must be unique within ISOPlanner. The code is generated automatically and starts with ‘A.1’.

Unique ID

Optionally give your asset a unique ID, perhaps referencing the asset registered in another system.

Type

Choose the type from a fixed list.

  1. Information (intangible assets stored as information. e.g. customer credit card numbers)
  2. Physical (e.g. office locations, inventory, hardware, machinery)
  3. Software (this is also information but a special type that can ‘process’ information assets)
  4. Financial (e.g. stocks or gold)
  5. Supplier (e.g. service providers, hardware suppliers)
  6. People (e.g. groups of people that have the same clearance level)

Status

Choose from the following options:

  • Active
  • Registered
  • Archived

The difference between ‘Active’ and ‘Registered’ is that a registered asset may not actually be in use yet.

Date active

The date that the asset was actively put in use.

Archiving date

The date that the asset was archived – and therefore no longer in use.

Owner

The person responsible for the asset.

List on SharePoint

Here you can link a SharePoint list with items for this asset.

Example: create an asset ‘Laptops’ and link a list on SharePoint containing all laptops.

Standards

If an asset in not relevant in all activated standards, then use this option to identify for which activated standards the asset is relevant.

Location

Specify where the data associated with this asset is stored or processed.
This field supports free text or predefined values (for example, EU, US, UK).

💡 How it’s used
The Location field is used by ISOPlanner to determine whether data related to this asset is processed or stored outside the European Economic Area (EEA).
When this asset is linked to a Processing Activity, ISOPlanner automatically analyses its Location value to assess whether a transfer outside the EEA occurs.

Examples:

  • If the asset’s location is set to “EU”, the transfer indicator in the related processing activity remains No transfer outside the EEA.

  • If the asset’s location is set to “US” or “Singapore”, ISOPlanner flags a transfer outside the EEA and may suggest that additional safeguards (such as SCCs) are required.

To maintain accuracy, keep the Location field updated for all information assets, especially cloud services, applications, and data storage systems.

Tags

Add one or more tags to group and filter your assets as you like.

Shared with

This field is available only Business and Premium subscription and can be used to organize visibility of data per department of group of users. For more information see how you can use Role based access 

Retention period

This field is specific for Asset of the type: Information. This way you can easily have the overview of when action is needed in regards to this information and is also easily find and visible in Processing activities, to have a clear overview of the processing data.

Description

Describe your asset in this multi line HTML field.

Classifications

Add one or more classifications to the asset. An asset can be classified in several ways. For example, on Confidentiality, Environmental impact or Reputation.

Related information

The pane which can be opened on the right contains more information related to asset. In the tab “Context” you can link an asset to one or more risks, processes or other assets. For any comments use the tab: “Activities. In the tab “Library” you can link related document and in the tab “Changelog”, which is being automatically filled in, you can find details on any change made on that particular asset. For more details see also Related information pane. 

 

Resources