Featured guide
Create and assess a risk
Learn how to complete CIA and FAIR assessments, add controls, assign treatment actions and manage risk exceptions.
Read the guideAsset Management
Build the asset register that provides ownership, classification and CIA context for risk and compliance decisions.
Start with the workflow
From identification to risk context
Assets are created and valued before they are sent into the risk assessment workflow.
1
Identify
Create manually or import from CSV.
2
Classify
Choose class, category, type, owner and lifecycle.
3
Value
Complete required confidentiality, integrity and availability ratings.
4
Control
Record applicable controls and operating status.
5
Assess
Send the asset to the Risk Register.
Asset workflows
Build and use the asset register
Create dependable asset data and move high-value records into risk assessment.
Important operating rules
CIA valuation is required
The asset value is the starting point for risk assessment and responds to the organisation-wide 3×3 or 5×5 configuration.
- Changing the matrix recalculates related values.
- Criticality labels do not automatically enforce workflow.
- Optional lifecycle and supplier data can be completed later.
- Use unique identifiers to reduce duplicate assets.
No guidance matches that search.