With reference to Control
Compliance Suite, an asset is defined as an object in the
organization that has certain properties.
Table: Features of assets
Feature
|
Description
|
Value
|
An object must have a
value in the organization to become an asset. Without a value, the
object is a liability.
|
Owner
|
The owner of the asset
carries the responsibility to secure and maintain the value of the
asset.
|
Restricted access
|
An asset must also have
limited access to safeguard its value. Since an asset has value,
some benefit can be derived from its use. Any unlimited access that
is granted to assets would imply zero value.
|
In a broader perspective,
assets can be primarily divided into the following major
non-technical groups:
Control Compliance Suite
deals with the technology assets.
Technology assets are important because of the
following reasons:
-
Technology assets store information.
-
Technology assets have role-based access
control.
People are granted
various levels of authority over these assets.
-
Technology assets often control other physical
systems.
Primitive technology
assets include User accounts, Computers, Printers, Network
Infrastructure, and Services. Control Compliance Suite collects
data on these primitive assets.