Skip to main content
All downloads

Template

Connect information and assets with clear ownership.

Use one inventory or connect existing records. The template brings information, associated assets and ownership together with short maintenance instructions.

Cover of Asset inventory: Excel template for ISO 27001
  • Connect information and assets using stable IDs.
  • Record ownership, protection references and component relationships.
  • Maintain reconciliation, retirement and file versions.

Use this template in these measures

Implementation measure

Assess and address technical vulnerabilities

Mapped requirements (1)
  • A.8.8 · Management von technischen Schwachstellen (DE)

    Supporting contribution

    The workflow connects suitable vulnerability information to actual inventory and risk, appropriate remediation and result checking. It does not replace technical assessment or remediation on the system.

Further framework mappings of this measure
  • TISAX · 5.2.5

    VDA ISA 6.0.3 · Partial contribution

    Reports, inventory matching, assessment, patch treatment and result checking support this ISA question. Actual systems, technical measures and additional requirements must be addressed operationally.

    Read the source ↗

Implementation measure

Build and maintain an information and asset inventory

Mapped requirements (1)
Further framework mappings of this measure
  • TISAX · 1.3.1

    VDA ISA 6.0.3 · Partial contribution

    A connected information and asset inventory with owners, accessible protection requirements and maintained changes supports an overview of relevant information and supporting assets. Further ISA requirements, protection decisions and actual implementation remain separate work.

    Read the source ↗

Implementation measure

Classify and label information

Mapped requirements (3)
Further framework mappings of this measure
  • TISAX · 1.3.2

    VDA ISA 6.0.3 · Partial contribution

    The matrix, markings and handling checks support this assessment topic. The scope and further safeguards still need operation-specific evaluation.

    Read the source ↗
  • GDPR · Art. 5(1)(c), 5(1)(f), 32

    EU 2016/679 · Supporting contribution

    For personal information, the checks support minimisation and protection. A label determines neither lawful basis nor overall adequacy of safeguards.

    Read the source ↗

Implementation measure

Return and hand over assets in an orderly way

Mapped requirements (1)
  • A.5.11 · Rückgabe von Vermögenswerten (DE)

    Supporting contribution

    The workflow connects asset return, information and knowledge handover, special device situations and open follow-up work to the existing change record. Actual execution and suitable protection remain necessary.

Further framework mappings of this measure
  • TISAX · 3.1.3

    VDA ISA 6.0.3 · Partial contribution

    Return and handling of the affected supporting assets contribute to the lifecycle process. This does not cover all further requirements for transport, storage, repair, loss, disposal and particular protection needs.

    Read the source ↗

Implementation measure

Transfer and retire devices and media securely

Mapped requirements (3)
Further framework mappings of this measure
  • TISAX · 3.1.3

    VDA ISA 6.0.3 · Partial contribution

    The workflow supports handling during transport, storage, repair, loss, return and disposal of supporting assets. Actual implementation and specific ISA requirements, such as disposal standards for high protection needs, are not established in full.

    Read the source ↗