Information Asset Register (IAR)

Modified on Fri, 16 Aug at 2:06 PM

Background

The information asset register catalogs the company's information assets, detailing their owner, location, and value. It serves to assist Personal Audit Systems Ltd (PAS Ltd) in managing and safeguarding both our own and our customers' information assets.

What is an Asset?

Assets are resources of value to a company and can be tangible, like office equipment and computers, or intangible, such as proprietary information. There are commonly three distinct categories:

Confidential assets contain sensitive information, including financial data, trade secrets, and customer details.
Assets that need to be readily accessible, such as servers, power supplies, and communication systems, are essential for operational continuity.
Integrity assets are required to be precise, dependable, and credible, encompassing databases, software code, financial statements, and various other forms of data.

Why is Asset Management Important in Information Security?

Information security is a critical field where effective asset management is essential for any business. The process of information security management involves the identification, assessment, and protection of information assets. This process is vital as it safeguards the company's most valuable assets against theft, corruption, or natural disasters. The initial step in establishing proper information security is to determine which assets are significant to the business, followed by an evaluation of the related risks. Afterward, the company can formulate a strategy to protect these assets, potentially incorporating measures such as encryption, data backup, and access control.

Why Would you Need an Information Asset Register (IAR)?

A register of information assets is the tool that PAS Ltd use to catalogue and track information assets, including databases, websites, and documents.

Asset Register

ID	Name	Type	Purpose	Owner	Custodian	Class.	Location	Medium	Key
PAS01	Customer Database	Database	List of all active customer and their licence details and any contractual terms	M Beech	IT	Internal	Digital	Database	Y
PAS02	Client Data	Files	Customer data that is uploaded and managed by customers	M Beech	IT	Confidential	Digital	Digital Files	Y
PAS03	Product Source Code	Digital/code	Source code for the P11D Organiser product	M Beech	Development	Restricted	SourceSafe	Digital	Y
PAS04	Nimble01	Storage Device	Storage device used in development environment	K Moulie	Development	Internal	IOMart Datacentre	Physical Device	N
PAS05	Nimble02	Storage Device	Storage device used in the live/customer environment	M Beech	IT	Confidential	Equinix Datacentre	Physical Device	Y
PAS06	Hosts (x2)	Computers	Hardware that run the development data centre	G Whitehouse	Development	Internal	IOMart Data Centre	Physical Device	N
PAS07	Hosts (x2)	Computers	Hardware that runs the live/customer datacentre	G Whitehouse	IT	Internal	Equinix Datacentre	Physical Device	Y
PAS08	Poral Source Code	Digital/code	Source code for the MyP11D.com portal	K Moulie	Development	Restricted	BitBucket	Digital	Y
PAS09	VSphere	Software	Management software for the development environment	K Mulie	Development	Internal	IOMart Datacentre	Software	N
PAS10	VSphere	Software	Management software for the live/customer environment	M Beech	IT	Internal	Equinix Datacentre	Software	Y
PAS11	Office365	Email / documents	Internal email and document storage solution	G Whitehouse	Support	Internal	Microsoft Datacentre	Digital	Y
PAS12	Support Data	Database	Customer support system containing all ticketing information and support documentation	G Whitehouse	Support	Internal	Freshworks Datacentre	Digital	Y
PAS13	Policy Documentation	Database	Published company policies for consumption by customers	G Whtehouse	Support	Internal	Freshworks Datacentre	Digital	N

Event Log: Last updated 16/08/2024