Common fields for all asset types

Control Compliance Suite supports certain predefined asset types.

All the asset types have certain common fields. To import the data for the common fields, you must configure the Common platform through CSV settings. In the asset import job, the data for the common asset type fields is imported from the CSV data collector.

See Configuring Common platform through CSV settings.

All the asset types have the following common fields:

Confidentiality

Confidentiality is the act of limiting the access and disclosure of information to only authorized users. The impact of unauthorized disclosure of confidential information can lead to security risk, loss of public confidence, or legal action against the organization.
You can set the value of this field as one of the following:
- Not Defined
  
  This is represented by 0 in the CCS directory. You must specify 0 in the CSV file, in case you want to define the asset value of Confidentiality as NotDefined after the asset import.
- Low
  
  This is represented by 1 in the CCS directory. You must specify 1 in the CSV file, in case you want to define the asset value of Confidentiality as Low after the asset import.
- Medium
  
  This is represented by 2 in the CCS directory. You must specify 2 in the CSV file, in case you want to define the asset value of Confidentiality as Medium after the asset import.
- High
  
  This is represented by 3 in the CCS directory. You must specify 3 in the CSV file, in case you want to define the asset value of Confidentiality as High after the asset import.
Note:

If you specify the value of this field in the CSV file as anything greater than 3, the asset system marks it as NotDefined.
Integrity

Integrity refers to the genuineness of the information. Integrity dictates that information must be protected from improper modification. Integrity is lost if unauthorized changes are made to the data by either intentional or accidental acts. Continuous use of corrupted data can result in inaccuracy, fraud, or erroneous decisions.
You can set the value of this field as one of the following:
- Not Defined
  
  This is represented by 0 in the CCS directory. You must specify 0 in the CSV file, in case you want to define the asset value of Integrity as NotDefined after the asset import.
- Low
  
  This is represented by 1 in the CCS directory. You must specify 1 in the CSV file, in case you want to define the asset value of Integrity as Low after the asset import.
- Medium
  
  This is represented by 2 in the CCS directory. You must specify 2 in the CSV file, in case you want to define the asset value of Integrity as Medium after the asset import.
- High
  
  This is represented by 3 in the CCS directory. You must specify 3 in the CSV file, in case you want to define the asset value of Integrity as High after the asset import.
Note:

If you specify the value of this field in the CSV file as anything greater than 3, the asset system marks it as NotDefined.
Availability

Availability refers to the accessibility of information resources. Attacks that consume network bandwidth, processor cycles, or disk space affect the availability of a system. If a mission-critical asset is unavailable to its end users, the organization's mission may be affected.
You can set the value of this field as one of the following:
- Not Defined
  
  This is represented by 0 in the CCS directory. You must specify 0 in the CSV file, in case you want to define the asset value of Availability as NotDefined after the asset import.
- Low
  
  This is represented by 1 in the CCS directory. You must specify 1 in the CSV file, in case you want to define the asset value of Availability as Low after the asset import.
- Medium
  
  This is represented by 2 in the CCS directory. You must specify 2 in the CSV file, in case you want to define the asset value of Availability as Medium after the asset import.
- High
  
  This is represented by 3 in the CCS directory. You must specify 3 in the CSV file, in case you want to define the asset value of Availability as High after the asset import.
Note:

If you specify the value of this field in the CSV file as anything greater than 3, the asset system marks it as NotDefined.
Tags

Tagging is a way to define an asset with meta information. Tagging helps you identify assets in some context that might prove helpful to determine the value of the asset. You can use the tags to filter the assets.

For example, you can create a tag that is called SOX and associate it with a relevant asset.
Asset Custodian
Asset Department

The department to which the asset belongs.
Asset Location

The location of the asset in the organization.
Asset Owner

Asset owner is the user who has the permissions to import, update, rename, and delete the assets in the asset system.
Asset Site

The site to which the asset belongs.
You can set the values of the common fields with the Pre rule

See Using a Pre rule to set the values of the common fields.