ISO 27001 expects you to know what information assets you have and to control who can get at them. Recording every laptop, login, key and card against the person it was issued to covers both, and when someone leaves, a single filter shows everything that needs to come back or be switched off.

Effective Excel Registers

Part of the alphaZ ER series of Excel registers, built for listings that grow and need to be sorted and filtered. Supplied in fully editable MS Excel format, with a Google Sheets version included, and all text in Calibri font for improved readability.
The register is set up with:

• Drop-downs for equipment type, security risk, who it is issued to and whether it is in use, with the lists editable on the Instructions sheet
• Conditional formatting that turns check due dates orange as they approach and red once passed
• Duplicate item numbers flagged, and filters on the equipment sheet

alphaZ documents - tried and tested registers with no junk, jargon or unnecessary columns, developed over 25 years through practical use in the real world.

Further Reading

Further guidance on assets, access and leavers:

• Access Control, Passwords and User Authentication
• Leavers and Offboarding
• Physical Security for Information
• Information Security knowledge base

How to Download

To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This register is also included in every alphaZ toolkit that covers ISO 27001, from the standalone ISO 27001 Toolkit to the integrated toolkits, so the toolkit route gives you this file plus everything else you need in one download.

Need Help Implementing?

If you'd like a hand building the asset list, reviewing access when roles change, or with your wider information security management system, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

IT Equipment and Logins Register Template

An IT equipment and logins register template in Microsoft Excel for recording the IT equipment the organisation owns and who it is issued to, alongside the logins, keys, key fobs and access cards held by each person. A Google Sheets version is included.

ISO 27001 includes Annex A controls for an inventory of information and other associated assets, the return of assets when someone leaves, and the management of access rights. This register keeps the equipment and the access in one workbook, and it is one of the records looked at during ISO certification audits when asset management and access control are reviewed.

What's Included in this IT Equipment and Logins Register

• IT Equipment - one row per item, with the item number, date purchased, type, model or description, owner, security risk rating, who it is issued to, the date the next check is due, comments or configuration settings, and whether it is currently in use. Types run from desktops and laptops to network equipment, handhelds, printers and software.
• Logins Keys Cards - every login, key, key fob and access card, who it was issued to, a description and comments.
• Instructions - how the register works, the lists behind the drop-downs, and the days ahead setting for the check due warning.

When Someone Leaves

Because every item and every credential is recorded against a named person, both sheets can be filtered to one name to show everything that person holds - the laptop to collect, the keys and cards to get back, the logins to disable. That makes offboarding quicker and gives a record that access was removed, which is exactly what the return of assets and access rights controls are asking for.

The same filters work in the other direction when a role changes or a check is due, and the security risk rating lets higher-risk equipment be picked out for closer attention.

Who Needs an IT Equipment Register?

Any organisation implementing or maintaining ISO 27001, or an integrated system that includes it. It is just as useful without certification in view, for a business that wants to know what IT it owns, where it is, and who can get into its systems and premises.

Pairs with the Risk Register and Leavers Checklist

The assets recorded here are the starting point for the ER15 Information Security Risks register. When someone leaves, the F-Q20 Staff Leaving Checklist works through equipment, IT access and keys, and this register shows what to include. The P-21 IT Equipment Policy sets out the rules for issuing and returning devices.