Andrew Chambers

Information Asset Register

Identifying key assets Think about what would happen if you lost the availability of each of the assets in your list. If the consequences are severe – e.g. your organisation couldn’t function without it – this means it’s a key asset. These are critical to your organisation but don’t always contain the most sensitive information. Include key assets as a column on your IAR so they can be identified quickly. Describing assets There are a number of useful fields which should be recorded on your IAR – e.g. how long assets should be retained, who can access them and whether they contain personal data (see template). Assets can be described and managed at a system level if the information contained within the system is the same – e.g. a purchase order database. If your systems contain various types of information with different values, risks and sensitivities, each should be noted as a separate information asset.

IT Strategic Planning

Determine purpose and outcomes of the planning process Establish who the stakeholders are or who else needs to be involved in some other capacity Prepare draft agendas for potential workshop sessions, including the selection or design of practical activities Communicate with the prospective stakeholders regarding the purpose and process Brief all participants and staff on their respective roles and their responsibility in achieving the expected results of the process Support effective process in group discussion Ensure various perspectives are heard and respected Open up honest and direct conversation of difficult issues while ensuring respectful communication Alert leaders to any issues that may require personal or individual follow-up