Asset register

ISO 27001 asks you to know what you need to protect and who is responsible for it. Under Registers, choose Assets. The register shows when your organisation has ISO 27001 switched on.

Add each asset with its type (information, software, hardware, a service, people or a location), its classification (public, internal, confidential or secret), its owner and where it is. Tick the risks that concern it; you keep the risks themselves under Risks. Filter the list on type.

Everything you write here is encrypted with a key of your own organisation.