Information Asset Register (IAR)

Modified on Tue, 28 Oct at 9:58 AM

Background

The information asset register catalogs the company's information assets, detailing their owner, location, and value. It serves to assist Personal Audit Systems Ltd (PAS) in managing and safeguarding both our own and our customers' information assets.

What is an Asset?

Assets are resources of value to a company and can be tangible, like office equipment and computers, or intangible, such as proprietary information. There are commonly three distinct categories:

Confidential assets contain sensitive information, including financial data, trade secrets, and customer details.
Assets that need to be readily accessible, such as servers, power supplies, and communication systems, are essential for operational continuity.
Integrity assets are required to be precise, dependable, and credible, encompassing databases, software code, financial statements, and various other forms of data.

Why is Asset Management Important in Information Security?

Information security is a critical field where effective asset management is essential for any business. The process of information security management involves the identification, assessment, and protection of information assets. This process is vital as it safeguards the company's most valuable assets against theft, corruption, or natural disasters. The initial step in establishing proper information security is to determine which assets are significant to the business, followed by an evaluation of the related risks. Afterward, the company can formulate a strategy to protect these assets, potentially incorporating measures such as encryption, data backup, and access control.

Why Do We Need an Information Asset Register (IAR)?

A register of information assets is the tool that Personal Audit Systems Ltd use to catalogue and track information assets, including databases, websites, and documents.

Asset Register

ID	Name	Type	Purpose	Owner	Custodian	Class.	Location	Medium	Key
PAS01	Customer Database	Database	List of all active customer and their licence details and any contractual terms	M Beech	IT	Internal	Digital	Database	Y
PAS02	Client Data	Files	Customer data that is uploaded and managed by customers	M Beech	IT	Confidential	Digital	Digital Files	Y
PAS03	Product Source Code	Digital/code	Source code for the P11D Organiser product	M Beech	Development	Restricted	SourceSafe	Digital	Y
PAS08	Poral Source Code	Digital/code	Source code for the MyP11D.com portal	K Mouli	Development	Restricted	BitBucket	Digital	Y
PAS11	Office365	Email / documents	Internal email and document storage solution	M Beech	Support	Internal	Microsoft Datacentre	Digital	Y
PAS12	Support Data	Database	Customer support system containing all ticketing information and support documentation	M Stokes	Support	Internal	Freshworks Datacentre	Digital	Y
PAS13	Policy Documentation	Database	Published company policies for consumption by customers	M Stokes	Support	Internal	Freshworks Datacentre	Digital	N
PAS14	Microsoft Azure Infrastructure	Data Storage and infrastructure	Data management and infrastructure used by the MyP11D customer facing service	M Beech	IT	Internal	Microsoft Azure (UK South)	Digital	Y
PAS15	Microsoft Azure Infrastructure	Data Storage and infrastructure	Customer licencing and activation services	M Beech	IT	Restricted	Microsoft Azure (UK South)	Digital	Y
PAS16	Phone System	Database and facilities	Customer facing telephone system	M Stokes	Support	Internal	Packnet VOIP Service (Manchester, UK)	Digital	Y

Event Log: Last updated 28/10/2025