What is an asset?
Assets in Complychain can be both physical and digital assets. The purpose of managing assets in Complychain is to map out compliance related information to your asset and how these assets integrate with other compliance elements, such as your suppliers, risk assessments, security incidents and article 30.
Hint: As a rule of thumb, it makes sense to create the assets in Complychain if:
The asset contains personal data (relevant for GDPR)
The asset supports critical processes (relevant for NIS2)
A risk assessment has to be made on the asset
Step-by-step process
To create an asset in Complychain, you must:
1. Navigate to the Asset module
2. Click on the Create Asset button
3. Fill out at least the required information related to the asset
4. Click on the Create Asset button in the drawer
Description of data fields
When filling out information related to the asset, you can fill out the following data fields in the creation process:
Name: Enter a clear and descriptive title, etc. "CRM - Hubspot"
Type: Choose between the options: Digital and Physical
Criticality: Describes how important the asset is for compliance and operations. High score indicates the asset is storing critical data or is critical to operations.
Responsible: Assign a specific user or user group as responsible for the asset.
Departments: Select the department(s) the asset belongs to / is used by
Category: Use this to categorize assets as you prefer
Note: Add internal remarks or comments about the asset
Compliance: Mark whether the asset is relevant for GDPR and/or NIS2 based on the data that is stored and the processes it support
Note: After creating the asset, there are more fields to specify information about the type of asset (physical vs. digital), what data is stored, and make connections to other elements across the platform.