How does the Information Assets module work?

Information assets are necessary resources in the Information Security Management System for companies to continue to operate and achieve the objectives proposed by top management.

Asset means any component (whether human, technological, software, etc.) that supports one or more business processes of a business unit or area.

How to create an information asset?

Click on the information asset module and go to the "Create my first asset" button, a form will appear.
Here you must fill in the following required fields:
Name: Assign a name to your information asset.
Criticality: Where you will be able to rate it for confidentiality, integrity and availability, at the end you will get a total rating.
Type of asset: Define if the asset is a hardware, software, person, service, etc.

You will also have as optional fields:
Description: Details what this asset consists of.
Attach evidence: Where you can upload backup information about the asset.

How to create associations?

You will be able to associate processes, threats and vulnerabilities, risks and responsible by clicking on the "Associate" button, there you will see the list of registers in the module you are in. In this section you can search for the registers with the search engine or choose from the options available in the module.

To make the association you must click on the "+" icon on the right side of the register to be selected.

Once you have registered and associated your information asset you can save it by clicking on "Create". Once created you will be able to visualize it in the main dashboard of the module, you will be able to see the code, name and qualification of the asset.

How does the import and export option work?

Import
Generally the information assets in a company tend to be of great volume and if you want to centralize all the information in one place the most efficient way to do it is through a massive data import. You will be able to find this option in the three dots icon (...) Learn more in the following tutorial How does bulk import work?

Export
You can export all your records in Excel format at any time through the three dots icon (...) on the right side.

How can I filter it?

By date
Search for the assets you need by a specific date by going to the left side and clicking on "All dates" and selecting whether it is by registration date or general.

By rating
You can also filter by the asset's final rating, you can find the "Rating" filter on the right side of Date.

How to edit an information asset?

You can enter and edit the record at any time, just click on it and the "See more" button will appear on the right side, when you click on it you will be able to see all the details of the asset and make the modifications you consider necessary.

Finally, click on the "Save" button and your changes will be registered.

How to delete an asset from the information?

If you consider that you no longer need that asset in your records, you can delete it by clicking on it and you will see the trash can icon on the right side. Remember that if you delete this asset you will not be able to recover the information it contained, if you agree, click on "Delete".

How to parameterize the rating of information assets?

Go to the parameterization module located in the upper bar on the "Gear" icon, there choose the ISMS management system and then the option "Asset criticality rating", here you can modify the criticality levels, the continuity variables and the time ranges.



Criticality levels
Here you can create new levels that you consider necessary for the qualification of the assets with the "Create levels" button (at most you can have 10 levels).



To edit the levels, click on the "Edit levels" button, here you can change the name, weight and color. You can also delete those levels you don't consider necessary with the trash can icon. 

Note: If you delete a level you must replace that level with another level already created so that the previous asset qualification is not damaged.


Once you have set this tab click "Save".


Variables 
Here you can create new variables that you consider necessary for the qualification of the criticality of the assets with the button "Create variables". You should write all the variable information: name, weight percentage and description of each rating option.
Note: The sum of all variables must be = 100%.

In addition, you can edit the default variables, to do so click on "Edit variables" to parameterize this section, you will get a form where you can modify the variable information such as: name, weight percentage and description of each rating option. 

You will also be able to edit each of the variable levels, assign a name, weight, change the percentage scale and add new levels.


As with the criticality levels, you can delete any variable by clicking on the trash can icon. When deleting a level, you must assign a level to replace the deleted one, since the assets that have the assigned level cannot be left without a level. 



Don't forget that once you have set this tab you must click on "Save".

Create your information assets