Skip to main content
Quick summary
  • Assets is your register of the information assets you hold, with suggestions drawn from the suppliers you’ve added.
  • Your devices are asset records: Devices is a filtered view of this register, not a separate one.
  • Set Classification and Criticality as you go, because processing activities and risks link back to them.

​
Add an asset

1

Open Assets

Click Privacy & Security in the sidebar, then Assets.
2

Accept a suggestion, or create your own

Suggested Assets splits into supplier-derived options, tagged with the supplier that implies them, and generic ones, like a password manager. Click Add on one that fits, or Add Asset to start from scratch. Each new asset gets an auto-numbered ID (A-001, A-002…).
The Information Assets register showing the Suggested Assets carousel and the assets table

The Information Assets register, with the Suggested Assets carousel above the table.

3

Set the asset type and link a supplier

Choose the Asset Type and link the Supplier that provides it. If the supplier came from the catalogue, some details fill in automatically.
The Information Assets table with the Asset Type and Supplier columns highlighted

Asset Type and Supplier, set inline on the Information Assets table.

4

Classify it

Set the Classification and Criticality. A processing activity links back to these, as does a Risk Register entry when it lists the assets a risk affects.
The Information Assets table with the Classification and Criticality columns highlighted

Classification and Criticality, set inline on the Information Assets table.

​
Devices

Privacy & Security → Devices opens the same records and table with a device filter applied, narrowed to Computer Device and Mobile Device.
  • The filter shows as a chip you can reset.
  • Device Make, Device OS and Source replace the Supplier and Criticality columns.
The Devices view showing the active device filter chip and the Device Make and Device OS columns

The Devices view, with the device filter chip active and the Device Make and Device OS columns shown.

A device record usually arrives one of two ways:
  • Reported by a colleague: A device registered through the staff portal lands here automatically, with Source set to User reported. Staff report devices through the Device Reporting item on a checklist.
  • Added directly: Click Create New on the Devices view, or add it in Assets with Add Asset.

Data processing and DPIAs

What you do with the personal data an asset holds.

Suppliers

Where a supplier-derived suggestion comes from.

Manage and customise your staff portal

Where Staff Portal device registration comes from.