Less searching, more certainty about what is running.
One asset register per organisation with CIA classification, owner, recovery time and a reconfirmation clock. Incidents, processing activities, suppliers, risks and continuity plans all point to the same asset. Built and hosted in the EU.
From now to next
From three lists to one register that keeps up
The list of systems usually exists. Three times over, in fact: at IT, with the privacy officer and in the risk analysis. None of the three knows about the others, and none has been updated this quarter.
Every department keeps its own list
IT knows the servers, privacy knows the processing activities, risk knows the crown jewels. The same application has a different name everywhere.
One register, one asset ID
Systems, applications, data sets and services are recorded once. Incident, Privorium, TPRM, Risk Heat Map, TRIAS and BCM all point to that same asset.
Classification is a box-ticking exercise
CIA scores were assigned once and never revisited. An empty field silently counts as low.
Classification with a clock
Low, medium, high or not yet assessed, and the last one stays visible as a shortfall. The owner reconfirms a crown jewel every 90 days and everything else every 180, with escalation if they let it slide.
Migration takes weeks
The existing list lives in Excel, with column names nobody can explain any more.
An import wizard that recognises columns
Upload CSV or Excel. The wizard recognises target fields by column name and by the values themselves, shows a trial import and writes only on your approval, in one transaction.
The service desk knows more than the register
TOPdesk holds assets that never made it into the register, and vice versa.
Proposals from TOPdesk
Assets from TOPdesk arrive as proposals, refreshed overnight when they change. The register never changes without a decision by an administrator.
This is what it looks like
A selection from Asset
Click a thumbnail for that screen, or the image itself for the full-size view.
Frequently asked questions
What you want to know about Asset beforehand
What is Asset?
Asset is Audirium's asset register (CMDB): one register per organisation for systems, applications, data sets and services with CIA classification, owner, recovery time and a reconfirmation clock. The other parts of the suite point to the same asset instead of keeping their own list.
Who is Asset for?
For the information security function and the IT administrator who maintain the register, the asset owners who periodically confirm that their asset is still correct, and the privacy, risk and continuity functions that build on the register. Owners receive their requests as notifications; administrators see the cockpit.
What does Asset actually do?
Asset records assets in eight types with CIA classification and a crown-jewel flag, uses a clock to check whether the owner still confirms the asset, captures relations and links to incidents, processing activities, suppliers, risks and controls, imports existing lists from CSV or Excel and accepts proposals from TOPdesk.
How does Asset differ from an Excel list or an IT CMDB?
An Excel list ages quietly; in Asset an empty CIA field stays visible as a shortfall and an expired confirmation escalates. An IT CMDB knows the technology, Asset adds the governance layer: classification, owner, recovery time and the link to incident, processing activity, risk and continuity plan.
Does Asset work with other parts of the suite?
Yes. TRIAS, Incident, TPRM, Privorium, Risk Heat Map and BCM read and write through a secured route and use the same asset ID. An incident or risk in another app therefore points to the right system without rewriting. Every link stays within your own organisation.
Where is Asset data stored?
On Hetzner servers in the EU. Each organisation has its own separate database; data from different organisations never ends up in one file. Asset uses no AI and sends no data to third parties.
What Asset offers
The register that gives the other apps their footing
Asset is the source for every system, application, data set and service. The other parts of the suite read and write through a secured route, never directly in each other's data.
Eight asset types
System, application, data set, service, server, database, network and workplace, with owner, environment and supplier reference.
CIA classification and crown jewels
Confidentiality, integrity and availability at low, medium or high. A crown jewel and an asset holding personal data carry a flag that makes the cockpit and the clock stricter.
Reconfirmation clock
The owner periodically confirms that the asset is still correct: announcement, request and, if nothing happens, escalation to the organisation's administrators.
Relations and links
Depends on, runs on, contains, delivers to, uses, integrates with. Plus links to incidents, processing activities, business functions, suppliers, contracts, risks and controls in the other apps.
Recovery time per asset
How long it takes to have this asset available again. BCM reads that figure and tests the chain under a business process against the RTO.
Import wizard for CSV and Excel
Four steps: file, columns, trial import, import. Recognition by column name and by values, duplicate names skipped, errors with the row number from Excel.
Proposals from TOPdesk
Assets from TOPdesk arrive as proposals in the wizard, with origin and date. You choose per field what to take over, and you can release your own value per field again.
A cockpit that counts honestly
One score from classification, ownership, currency, coherence and traceability. A measure without a denominator does not count, and every gap links through to the assets behind it.
How it works
From scattered lists to a confirmed register in five steps
Import what exists
Upload the current list as CSV or Excel, check the recognised columns and the trial import, and import in one go.
Classify and assign owners
Give every asset a CIA rating, mark crown jewels and personal data and assign an owner.
Record relations and links
Capture what depends on what and what runs where, and link the asset to incidents, processing activities, suppliers and risks.
Enter the recovery time
Record per asset how long recovery takes, so BCM can test the chain under a process.
Keep the register current
Have owners confirm on the clock, take over or dismiss proposals from TOPdesk, and work through the gaps in the cockpit.
One register that incident, privacy, risk and continuity all point to?
Request a demo or get in touch for more information about Asset for your organisation.