Step 2: Confirm the aggregation or grouping of the information asset The guidelines and the questions below will assist in determining whether the information assets are defined at a consistent level of granularity. Guidelines An information asset is a grouping with a logical, dominant concept having a common purpose or function, rather than determined by related applications or technologies. Questions Question Instructions Q# 2a Does the information asset represent a collection of business information No Go to Q2b. – and records? Yes Go to Q2c. – Are the information and records part of an existing information No Identify any other information that – 2b comprises the asset as in step 1. Then go to Q2c. Yes Merge the information assets and – adjust the description. Return to step 1. 2c Does the information and records contain a logical, dominant concept? No Divide the information asset into – smaller groupings and adjust the description. Return to step 1. Yes Go to step 3. – Step 3: Check the name of the information asset The guidelines and questions will assist in determining whether the information asset is named correctly. Guidelines In the majority of cases, a single system or application will contain multiple information assets. Information assets are considered to be conceptually separate from, and exist independently of, the system or application that contains them. Questions Question Instructions Q# 3a No Revise the name in consultation with Is the information already named independently of any system or – business representatives. application? Yes - Register the information asset in an information asset register. No Revise the name in consultation with Is the information asset named using the organisation’s common business – 3b business representatives. terminology? Yes - Register the information in an information asset register.
Step 2: Confirm the aggregation or grouping of the information asset The guidelines and the questions below will assist in determining whether the information assets are defined at a consistent level of granularity. Guidelines An information asset is a grouping with a logical, dominant concept having a common purpose or function, rather than determined by related applications or technologies. Questions Q# Question Instructions 2a Does the information asset represent a collection of business information and records? No – Go to Q2b. Yes – Go to Q2c. 2b Are the information and records part of an existing information No – Identify any other information that comprises the asset as in step 1. Then go to Q2c. Yes – Merge the information assets and adjust the description. Return to step 1. 2c Does the information and records contain a logical, dominant concept? No – Divide the information asset into smaller groupings and adjust the description. Return to step 1. Yes – Go to step 3. Step 3: Check the name of the information asset The guidelines and questions will assist in determining whether the information asset is named correctly. Guidelines In the majority of cases, a single system or application will contain multiple information assets. Information assets are considered to be conceptually separate from, and exist independently of, the system or application that contains them. Questions Q# Question Instructions 3a Is the information already named independently of any system or application? No – Revise the name in consultation with business representatives. Yes - Register the information asset in an information asset register. 3b Is the information asset named using the organisation’s common business terminology? No – Revise the name in consultation with business representatives. Yes - Register the information in an information asset register.
17-F23-Identifying-and-managing-information-assets.docx