Asset management is a process of tracking assets in your organization, verifying that each asset is up-to-date with security or software patches, as well as ensuring that each asset in the organization is sufficiently protected and properly configured.

SIRP’s Assets module allows you to keep track of assets in your organization, consequently allowing you to identify the weak areas that you don’t know about.

With all the assets integrated into one module, SIRP allows keeping an active tab of assets on incident management, threat intelligence, vulnerability management, and risk assessment modules. SIRP fusing this aggregated information with the Asset severity to provide a score called SIRP Security Score (S3), which makes security data instantly actionable. This enables organizations to prioritize risks, make better decisions faster and respond more effectively.

With SIRP’s Assets module, you can distribute your organizational assets into nine different categories:

Each category comes with an extensive list of fields, which can be used to define and store all different types of data about an asset. SIRP also provides flexibility to either use all the given fields or disable the irrelevant ones.

To enable or disable asset fields of the aforementioned asset categories, the user needs to select Administration from the Main Menu, choose Assets tab available at the top of the page, and then select Field Settings under that. Your screen should display a page like the one presented in the following image:

This page displays all available categories along with their fields. You can toggle the button adjacent to each field name to either disable or enable the field. Once you are done making the changes, click on the Save button available at the bottom of the page.

In addition to a category-based distribution of your assets, SIRP also allows you to divide your assets into another four sub-levels hierarchy:

Usage of any of these levels is up to you. You can choose either to use all these asset distribution levels or use any one or two. SIRP also allows you to change the names of the “Business Group” and “Asset Type”. So, if you wish to use the name “Asset Component” instead of “Asset Type,” you have an option to do it.

To manage your Business Groups, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Business Group under that.

This page displays the list of your defined Business Groups with an option to either Edit or Delete any record. To add a new Business Group, click on the Create Business Group button available at the top. Clicking on the button will display a popup with a single field called Name. Enter the name of your Business Group in the field and click Create.

The newly added Business Group will appear in the main list.

If you wish to edit the name of an existing Business Group, click on the edit icon under the Actions list. A form will appear like the Add form but with the name of the chosen Business group in the Name field. Change the Name as per your requirements and then click Update.

If you wish to delete any Business Group, click on the trash icon under the Actions list. A confirmation message will appear on the screen. Click Ok to confirm the deletion or click Cancel to cancel the action.

If you wish to change the name of this asset level from “Business Group” to something else, click on the Change Title button. A similar kind of popup form will appear. Enter the new name for this level in the Title field then click Save.

To manage your Asset Groups (which is another level available in SIRP to distribute your assets logically), navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Groups under that.

This page displays the list of your defined Asset Groups with an option to either Edit or Delete any record. Each Group can be assigned to a single Business Group.

To add a new Asset Group, click on the Create Asset Group button at the top. Clicking on the button will display a popup. Enter the Name of your Asset Group in the name field, search and select the Business Group then click Create.

The newly added Asset Group will appear in the main list.

Unlike other asset hierarchy options, you cannot change the name of this asset level from “Asset Group” to something else.

If you wish to edit the name of an existing Asset Group or Business Group that Asset Group is associated with or list of Subgroups that Asset Group has, click on the edit icon under the Actions list. A form will appear like the Add form but with the name of the chosen Asset group in the Name field along with its Business Group and Subgroups. Change the Name along with Business Group and Subgroups as per your requirements and then click Update.

If you wish to delete any Asset Group, click on the trash icon under the Actions list. A confirmation message will appear on the screen. Click Ok to confirm the deletion or click Cancel to cancel the action.

To manage your Asset Subgroups (which is another level available in SIRP to distribute your assets logically), navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Subgroups under that.

This page displays the list of your defined Asset Subgroups with an option to either Edit or Delete any record. Each Subgroup can be assigned to one or more Asset Groups.

To add a new Asset Subgroup, click on the Create Asset Subgroup button at the top. Clicking on the button will display a popup. Enter the Name of your Subgroup in the Subgroup name field, search and select the Parent Asset Group then click Create.

Unlike other asset hierarchy options, you cannot change the name of this asset level from “Asset Subgroup” to something else.

If you wish to edit the name of an existing Subgroup or Asset Group that Subgroup is associated with, click on the edit icon under the Actions list. A form will appear like the Add form but with the name of the chosen Subgroup in the Name field along with its Asset Group. Change the Name along with Asset Group as per your requirements and then click Update.

If you wish to delete any Subgroup, click on the trash icon under the Actions list. A confirmation message will appear on the screen. Click Ok to confirm the deletion or click Cancel to cancel the action.

Asset Types are the logical grouping of similar types of assets. For example, if you have four Microsoft Active Directory servers, you can add them as different Assets, but you can group them together by creating an Asset Type called “Active Directory Servers”.

To manage your Asset Types, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Asset Type under that.

This page displays the list of your defined Asset Types with an option to either Edit or Delete any record. Each Asset Type can be assigned to one or more Asset Subgroups. You also have an option to directly assign Assets to each Asset Type from the Add and Edit popup form.

To add a new Asset Type, click on the Create Asset Type button at the top. Clicking on the button will display a popup.

The newly added Asset Type will appear in the main list. If you wish to change the name of this asset level from “Asset Type” to something else, click on the Change Title button displayed on the top. A similar kind of popup form will appear. Enter the new name for this level in the Title field then click Save.

If you wish to edit the name of an existing Asset Type, click on the edit icon under the Actions list. A form will appear like the Add form but with the name of the chosen Asset Type in the Name field. Change the Name and then click Update.

If you wish to delete any Asset Type, click on the trash icon under the Actions list. A confirmation message will appear on the screen. Click Ok to confirm the deletion or click Cancel to cancel the action.

To evaluate an attack on business-critical systems, SIRP utilizes the assets value, and risks associated with those assets to provide an appropriate prioritization score. For organization-specific results, organizations can define values of their assets which signifies how important or mission-critical each asset is.

To manage your Asset Type Values, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Asset Type Value under that.

To add a new Asset value, click on the Create Asset Type Value button at the top. Clicking on the button will display a popup. Enter the Name and numeric Value and then click Create.

The newly added asset value will appear in the main list. You can click on the edit icon to edit an asset value or press the trash icon to delete an asset value.

If you want to change the term “Asset Value” to something else, you can do so by clicking on the Change Title button displayed on the top of the Asset value page. Once you click on this button, a pop-up will appear. Fill in the required files and click Update.

SIRP allows you to classify your assets into multiple classification levels which can be later used to prioritize your incident handling procedures and risk treatment plans. You can define these classification levels based on your organizational Asset Classification Policy.

To manage your Asset Classification levels, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Classification under that.

SIRP provides you with four pre-defined levels (Confidential, Restricted, Private, and Public), which you can either use directly or define your own. This page displays the list of your defined Classification levels with an option to either Edit or Delete any record.

To add a new Classification level, click on the Create Asset Classification button at the top. Clicking on the button will display a popup. Enter the Name and numeric Value and then click Create.

The newly added Classification level along with its value will appear in the main list.

Click on the edit icon to edit a classification level or the trash icon to delete a classification level.

For all your Hardware assets (Laptops, Servers, Tablets, etc.), you have an option to define a list of Operating Systems based on what operating systems are being used in your environment.

To manage the list of Operating Systems, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Operating Systems under that.

SIRP provides you with a list of few pre-defined Operating Systems along with their versions. You can either use the existing list as it is or define your own operating systems. This page displays the list of Operating systems with an option to either edit or delete any record.

To add a new operating system, click on the Create Operating System button at the top. Clicking on the button will display a popup. Enter the Name and Version of the operating system then click Create.

The newly added operating System along with its version will appear in the main list.

​

Each Asset in your organization can be assigned to an Owner, which helps your incident management team to direct their requests regarding a particular asset to the person responsible for that asset.

To manage the list of Owners, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Owners / Custodians under that.

This page displays the list of all the Asset Owners with an option to either edit or delete any record.

To add a new owner, click on the Create Asset Owner button at the top. Clicking on the button will display a popup. Enter the Name, Email, Phone Number, Mobile Number, and Designation of the person then click Create.

The newly added asset owner will appear in the main list.

Departments are used when you wish to assign a certain risk treatment action to a department instead of a person.

To manage the list of Departments, navigate to the Assets page, open the Main Menu, and select Administration. Once the Administration section is displayed, select the Assets tab at the top of the page, and then Departments under that.

This page displays the list of all the Departments with an option to either Edit or Delete any record.

To add a new department, click on the Create Department button at the top. Clicking on the button will display a popup. Enter the Name of the department and Email address associated with that department then click Create.

The newly added Department will appear in the main list.