Inventories of assets help ensure that effective asset protection takes place, and may also be required for other business purposes, such as health and safety, insurance or financial reasons. The process of compiling an inventory of assets is an important aspect of risk management. The following points should be considered while maintaining inventory:
The inventory should cover all important assets associated with each information system
Each asset should be clearly identified and its ownership and security classification agreed and documented together with its current location The relative value and importance of the assets needs to be identified so that the organisation can provide levels of protection commensurate with the value and importance of the asset.