Re: Are Critical Business Processes Assets that need to be included in Asset Inventor
hello all,
I heard from an auditor that critical business processes are need to be included in asset inventory and covered by asset management. It does not make any sense to me, what do you think?:mg:
Thanks
Contrary to what an accountant may think, the inventoried assets need not be tangible.
We cannot imagine a business surviving long without its core process for turning the needs of its customers into cash in the bank.
We know that businesses depend on their processes for survival.
So, why not include the organization's key processes in the risk assessment to decide which of them is an asset that depends on a secure computer network?
From this you may determine critical resources and controls.
Indeed, when determining critical facilities and equipment (part of resources) I ran sessions with senior management to determine their organization's key processes.
Start with the organization's mission and the processes necessary to fulfill that mission; instead of addressing processes as an afterthought.
John