Featured guide
Create and assess a risk
Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.
Read the guideBuild the asset register manually or from CSV and complete the classification and CIA data required for risk assessment.
Asset identification is the foundation of PurpleWASP risk assessment. Assets are organised by class, category and type.
Select Add Asset, then choose to create the asset from scratch.
Enter the name and description, then select class, category and type. Add criticality, status and ownership information where available.
Record location, lifecycle, warranty, licensing, supplier or technical information where relevant. Optional fields can be completed later.
Confidentiality, integrity and availability values are required because they calculate the inherent asset value used by risk workflows.
Confirm that the new assets appear in the register and open one record to validate classification, CIA value and ownership.
Confirm that the user exists, is active and that the source email matches exactly.
The organisation may have changed the global CIA scale or value bands. Review current settings and revalidate the asset.