Define System Assets: Option 1: Manual Entry
This is one of the options available for Defining the System Assets.
Manual System Asset Entry
Defining the System Assets manually requires an interactive, System by System data entry process.
- Click the 'Create' button on the main System Assets panel near the bottom right to bring up the Add Dialog
System Assets Table Create Button
- Enter the ID, Name and Summary for the System Asset
The ID should be a short identifier that can be used for referencing the System Asset in other areas, while allowing the name to be changed without breaking those references.
Both the ID and name must be unique. - Click the 'Select' button next to the Custodian field and select the Platform Team responsible for this new System Asset.
You can create one on the 'Select and/or Create a Platform Team' dialog if necessary. - Click the 'Select' button next to the Environment field and select the Environment this new System Asset resides in.In many cases, only the Production environment is referenced for all Systems, however depending on the granularity of reporting requirements and the application of controls, more nuanced Environments may be warranted, such as "SaaS Environment" or "PCI Environment".
- Under 'Platforms', if any of the platforms listed are applicable, select each one.
These refer to Mitre Att&ck platforms and are used to filter the Threats that apply to each System Asset. If nothing is selected, it is assumed that all Threats apply. If one or more platforms are selected, only the Threats applicable to those platforms selected are applied.
To select them all, click the first one to select it, then hold down shift and click the last one to select everything in between.
To select individual rows one at a time, hold down control (Windows) or command (macOS) and click each row.
To deselect individual rows, hold down control (Windows) or command (macOS) and click each already selected row to deselect it.System Asset Manual Create Dialog
- If you know the Information Assets that need to be added, they can be added here.
- User Account Types are not typically required for the purposes of preparing a PDSP.
- When done, click the 'Create' button.
- Repeat steps 1-3 until all System Assets have been defined. This can be revisited later if necessary.
System Assets Table Populated
Related Articles
Define Information Assets: Option 1: Manual Entry
This is one of the options available for Defining the Information Assets. Manual Information Asset Entry Defining the Information Assets manually requires an interactive, Information Assets by Information Assets data entry process. Click the 'Create' ...Define System Assets
This follows on from the VPDSF Setup guide, however this step may be revisited multiple times. Step 1.4 Define System Assets A System Asset refers to any component, whether hardware, software, network, or information system, that is essential to the ...Define Platform Teams: Option 1: Asset Hierarchy Holistic Entry - Manual Entry
This is one of the primary approaches to for utilising the Asset Hierarchy Holistic Entry. Asset Hierarchy Holistic Entry Manual Platform Team Entry Similar to Option2, the asset hierarchy panel has an Add button near the bottom right, above the main ...Define Platform Teams: Option 2: Manual Entry
This is one of the options available for Defining the Platform Teams. Manual Platform Team Entry Defining the Platform Teams manually requires an interactive, Platform by Platform data entry process. Click the 'Create' button on the main Platform ...Define Platform Teams: Option 1: Asset Hierarchy Holistic Entry
This is one of the options available for Defining the Platform Teams. Option 1: Asset Hierarchy Holistic Entry Rather than considering the Platform Teams in isolation, the Asset Hierarchy view allows their context to be seen while they are being ...