You can only protect information you know about. This register lists each information asset with its owner, classification and protection.
This register template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Register number and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested register templates. No junk, jargon or unnecessary content. Simple and usable register templates
developed over 25 years through practical use in the real world.
Further guidance on information assets and classification:
Download this register template with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This register is also included in the GDPR / Data Protection Toolkit and the ISO 9001 and ISO 27001 toolkits, including the integrated toolkits that combine them, so the toolkit route gives you this file plus everything else you need in one download.
If you'd like hands-on help identifying and classifying your information assets, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Information Assets Register Template
An information assets register for listing the information your organisation holds and the systems it is held in, with the information security classification, a description of the context and boundaries, the owner and the protection in place for each asset.
What's Included in this Register
- Asset - databases, cloud services, file stores, devices, paper records and other assets
- Classification - Confidential, Business Use or Public, with the meaning of each set out at the top of the register
- Description / Context / Boundaries
- Owner
- Protection - the controls applied to the asset
Why It Helps with Personal Data
Listing information assets shows the systems and locations where personal data may be held, including cloud services and AI tools, which makes it easier to complete the personal data register and to consider the risk of an asset being lost or compromised.
Who Needs an Information Assets Register?
Organisations working towards ISO 27001, maintaining an integrated management system, or reviewing how personal data and business information are protected.
Included in the GDPR / Data Protection Toolkit
This register is part of the GDPR / Data Protection Toolkit - the registers, forms, policies, procedure and guidance for documenting how you collect and process personal data, in one download, and is also included in the ISO 9001 and ISO 27001 toolkits.
Works with the Information Classification Guidance
The classification levels used here are explained for staff in the GG-8-07 Information Classification and Protection guidance.
Using the Register
Start with the systems and places where information is held - cloud services, shared drives, business software, email, laptops and phones, paper files - then give each asset an owner, a classification and a note of the protection in place. Review the register when systems are added or retired.
Including AI Tools
AI tools and AI features in business software hold prompts, outputs, transcripts and chat logs, which often include personal or confidential information. List them as information assets so their classification and protection are considered like any other system.
Linking to Risk
Assets classified as Confidential, or holding personal data, are the natural starting point for an information security risk assessment.
Related Documents
Other documents in the GDPR / Data Protection Toolkit that work alongside this one:
Keeping It Current
Update the register when a new system, cloud service or AI tool is introduced, and when one is retired, so that owners and protection are always known for the information that matters.
Would you rather we prepared it for you?
Our Personal Data Register and Privacy Notice Preparation service works through the personal data your organisation holds with you, including the AI tools in use, and prepares the register and privacy notice so they describe what actually happens to that data.
Personal Data Register and Privacy Notice Preparation