Asset Register
Record the systems, software, data stores, platforms, and digital services your organisation relies on. Assign owners, link vendors and evidence, and keep the register current.
-
Understanding the Asset Register
The Asset Register records the systems, software, data stores, platforms, device groups, integrations, and digital services your organisation relies on or must protect. Assets are not the same as vendors — vendors are third parties; assets are the things your organisation uses or owns. Vendors and evidence can be linked to an asset to show how it is supported.
-
Recording an asset
Each asset captures what it is (system, software, data store, platform, device group, integration, or digital service), what data it holds, how it is hosted, how access and MFA are handled, and how it is backed up. You can record data sensitivity flags so high-impact assets stand out.
-
Understanding asset ownership
Each asset has three owner roles. The business owner is accountable for why the asset exists and its business importance. The technical owner is responsible for configuration, access, operation or support. The review owner is responsible for periodically checking the record remains accurate. One person can fill multiple roles.
-
Linking vendors and evidence to assets
Assets, vendors, and evidence are connected. Vendors that support an asset can be linked to it from the asset record. Evidence (uploaded or auto-generated) can be linked to an asset to show what supports its posture, controls, or reviews.
-
Reviewing and retiring assets
Each asset can have a review date so the register stays current. The activity panel on each asset shows what happened over time — creation, edits, ownership changes, posture changes, vendor and evidence link changes, retire and restore actions.
-
Asset attention badges
Attention badges on each Asset Register row, and the Needs attention panel on each asset detail page, are generated from the asset record itself. They surface records that need follow-up — missing owners, overdue reviews, missing MFA status, missing backup status, missing linked evidence, or missing vendor links. Fixing the asset record removes the badge.
-
Tracking asset gaps in the Issue Register
Owner, admin, and director users can optionally record selected asset gaps as Issue Register items so they appear alongside other follow-up work. The control sits in the "Track asset gaps in Issue Register" section below the asset table and is hidden from managers and learners. Issue sync is manual only — there is no background scan, no scheduled sync, and no emails or external calls.
