Recording an asset
Each asset captures what it is (system, software, data store, platform, device group, integration, or digital service), what data it holds, how it is hosted, how access and MFA are handled, and how it is backed up. You can record data sensitivity flags so high-impact assets stand out.
Open the Asset Register and click Add asset. Complete the form: name and description, classification, data sensitivity, hosting/access/MFA/backup posture, and any non-blocking warnings the form previews. Assign business, technical, and review owners. Save the asset.
Capturing the posture data alongside the asset means you can see at a glance which assets are exposed (for example, missing MFA or untested backups). The form's on-the-fly previews highlight gaps so you can address them as you record.
Once saved, link any vendors that support the asset and attach evidence that supports its posture. The activity panel records each change so you can see how the record evolved.
