|

Asset Management guide

Create and import Assets

Build the Asset register manually or from CSV and complete the classification and CIA data used by connected Risk and governance workflows.

Asset Manager or authorised administrator Approximately 10 minutes per asset Updated 9 September 2026

Understand the Asset model

Asset identification is the foundation of PurpleWASP risk assessment. Assets are organised by class, category and type.

ClassesPeople, Process, Technology, Information/Data, Third Party and Physical.
Category and typeContext-sensitive choices that become more specific after the class is selected.

1. Create an Asset manually

1

Open the Asset Register

Select Add Asset, then choose to create the asset from scratch.

2

Describe and classify the asset

Enter the name and description, then select class, category and type. Add criticality, status and ownership information where available.

Asset category and type options change according to the selected asset class.
3

Add operational details

Record location, lifecycle, warranty, licensing, supplier or technical information where relevant. Optional fields can be completed later.

2. Complete the required CIA valuation

Confidentiality, integrity and availability values are required because they calculate the inherent asset value used by risk workflows.

Complete confidentiality, integrity and availability values using the organisation's configured 3×3 or 5×5 scale.
Global scale: an administrator can configure a 3×3 or 5×5 model. Changing the scale recalculates related asset and risk values.

3. Import Assets from CSV

  1. Download the current sample CSV.
  2. Populate required fields without renaming the headers.
  3. Open the import workflow and upload the file.
  4. Map source columns where required.
  5. Validate the preview and complete the import.
The asset import workflow supports CSV upload and mapping for larger inventories.

Verify the result

Confirm that the new assets appear in the register and open one record to validate classification, CIA value and ownership.

The asset detail view brings together CIA value, lifecycle, controls, related assets and risk status.

Common problems

An imported owner cannot be resolved

Confirm that the user exists, is active and that the source email matches exactly.

The calculated value changed

The organisation may have changed the global CIA scale or value bands. Review current settings and revalidate the asset.