🏷 Asset Management

"Keep track of what matters most — your assets and their dependencies."
Brainframe GRC helps you classify, link, and manage assets with their business requirements in mind.

The Inventory Overview already provides a general asset listing.

The Asset Management feature builds on this by letting you record detailed information for each asset, including maximum potential impacts — all of which feed directly into risk management.

Brainframe GRC distinguishes between:

• Primary assets – core services, processes, or data critical to your business.
• Supporting assets – underlying systems/resources that impact the primary assets.

This creates a risk hierarchy and makes dependency chains clear.

1️⃣ Asset Overview

These must always be documented and linked with supporting assets and risks.

2️⃣ Adding or Editing Primary Assets

To create or link a primary asset:

1. Go to the Resources menu → Core Business Assets.
2. Click the [+] button.

3. Enter the asset name:

• The system searches for similar existing documents.
• You can link an existing document as a primary asset (auto-collects supporting assets + risks).
• Or Create a new document (define type, title, details).

If you create a new asset, here's the view that you will be shown where you can define the document type, the title and other details related to the document type:

The next screen will allow you to configure all the details of your primary assets. The same screen will be shown if you click the update primary asset (L) on the primary asset list screen

From here you can:

1. Open the asset document.
2. Assign Responsible (R).
3. Assign Accountable (A), with optional Consulted (C) and Informed (I).
4. Configure which document types auto-link as supporting assets.
5. Manually add supporting assets.
6. Free text field where you can define Business Requirements (see below).
7. Configure which document types auto-link as related risks.
8. Manually add related risks.

3️⃣ Business Requirements

Examples aligned with ISO 27001:

• 🔒 Confidentiality – e.g. Personal data must not be accessed by unauthorized users.
• 📊 Integrity – e.g. Databases must ensure transactional accuracy.
• 🌐 Availability – e.g. Servers must withstand a full outage of 1/3 of data centers.
• 📑 Proof – e.g. Financial regulator requires daily transaction records.
• ⏱ RTO (Recovery Time Objective) – e.g. Service must be restored within 30 minutes.
• 💾 RPO (Recovery Point Objective) – e.g. Data must be restorable to at least 24 hours before incident.
• ⚖ Regulatory – e.g. EU data processing requires GDPR compliance.

4️⃣ Asset Creation Behaviour Configuration

When first adding an asset, you’ll define where new items are stored:

• In a new “Asset Inventory” folder under INBOX, or
• In a specific folder you choose.

5️⃣ Adding or Editing Supporting Assets

Supporting assets assist the primary one and may impact it if disrupted.

1. In Core Business Assets, click the pen or [+] next to the primary asset.

2. Link an existing document or Create a new one.

3. Select the type, fill in the details, and the asset will be linked.

6️⃣ Adding Existing Assets as Primary Assets

Any document can be upgraded to a primary asset:

1. Click the three dots next to the document.
2. Select Add to → Add as primary asset.

7️⃣ Asset List View

Switch to List View for an Excel-like layout of all assets.

From here you can:

1. Create a new primary asset.
2. Filter the asset list.
3. Load additional risk information like properties and last readings, and add a color to the different risks.
4. Configure the columns that are shown and export to Excel.
5. Click the asset name to open it.
6. Track and select checklist stage (Kanban).
7. View RACI roles.
8. Check all linked tasks.
9. Review supporting assets.
10. See linked documents.
11. Review Business Requirements.
12. Check related risks.

8️⃣ Best Practices

• 📂 Keep assets structured in dedicated folders.
• 🔗 Always link supporting assets to ensure dependency visibility.
• 🧮 Define business requirements early to align with ISO and resilience needs.
• ⚖ Map regulatory requirements (GDPR, NIS2, DORA) to relevant assets.

🎯 Visual Checklist

• [x] Primary assets documented
• [x] Supporting assets linked
• [ ] Business requirements defined
• [ ] Risks connected to assets
• [ ] Exported list view for auditors

Updated on: 05/09/2025