Skip to main content

Asset Name

Purpose​

Describe what the asset is and why it exists.

Asset Type​

  • Infrastructure / Platform / Information / Business Capability

Description​

  • Short functional description
  • What the asset does in the environment

Criticality​

  • Low / Medium / High / Critical
  • Based on impact on operations or security

Sensitivity​

  • Type of data handled (if any)
  • Public / Internal / Sensitive / Highly Sensitive

Exposure Level​

  • Internal only / Restricted / Exposed (via controlled entry point) / Public

Dependencies​

  • Systems or services this asset relies on

Relationships​

  • Other assets interacting with this one

Security Considerations​

  • Key risks or concerns related to this asset
  • Attack surface, trust level, role in architecture

Existing Controls​

  • Safeguards currently in place

Owner / Responsibility​

  • Functional owner (Ops / Sec / Dev)

Notes​

  • Additional remarks or evolution points