1. Introduction
    1. System Requirements
    2. Setup and Installation
  2. Getting Started
    1. Creating a Database
    2. Email Configuration
    3. Web Module Setup
    4. Web Module Update
  3. Navigating RM Studio
    1. Main Menu
      1. Save Function
      2. Import External Data
        1. Import Assets
      3. Clear User Cache
      4. Security
      5. Properties
      6. Languages
      7. Registration
      8. User Manual
      9. Manage Checkouts
      10. About
      11. Application Style
    2. Navigation Tree
    3. Tabs
    4. The Grid
    5. Context & Flow
  4. Common Entities
    1. Business Entities
      1. Asset Details - Basic Information tab
      2. Asset Details - Risks tab
      3. Asset Details - Categories tab
      4. Asset Details - Business Entities tab
    2. Contacts
    3. Teams
    4. Assets
    5. Asset Categories
    6. Asset Attributes
    7. Threats
    8. Standards/Controls
      1. How to: Standards, Regulations, Controls
      2. Standards Implementation Comparison
    9. Documents
  5. Gap Analysis
    1. How to: Gap Analysis
    2. Reporting
  6. Risk Assessment
    1. How to: Risk Assessment
      1. Risk Assessment Overview
      2. Adding Assets
      3. Adding Risks
      4. Evaluation Values
      5. Evaluating Risks
      6. Various Definitions
      7. Risk Assessment Reporting
    2. Risk Owner Tasks
    3. Risk Profile
  7. Web Module
    1. Dashboard
    2. My Tasks
    3. Reports
    4. Standards/Regulations
    5. Documents
    6. Incidents
    7. Risk Owner Web Solution
  8. Control Assessment
    1. Control Assessment Templates
    2. Control Assessment
    3. Reports - Control Assessment
  9. Risk Treatment
    1. How to: Risk Treatment
      1. Risk Treatment Templates
      2. Risk Criteria
      3. Asset Level
      4. Controls Tab
      5. Scheduling a Future Control
      6. Future Controls Tab
      7. Overview
      8. Reload Assets, Threats and Controls
    2. Risk Treatment Reports
  10. STPA
    1. STPA Projects
    2. Models and Diagrams
      1. How to: Create CS Models
      2. How to: Create CS Diagram
        1. Diagram Elements
        2. Models Progress Check
    3. Analyses
      1. How to: Define Purpose of Analysis
      2. Losses
      3. Hazards
      4. Relationship
      5. Constraints
      6. How to: Identify UCAs
      7. How to: Identify Loss Scenarios
        1. Loss Scenario Progress Check
    4. Reporting
    5. Global Properties
  11. Business Continuity Management Module
    1. Organization
      1. New Organization
      2. Stakeholders
      3. Resources/Processes
        1. Impact Analysis
        2. Requirements
    2. Incident Response/Recovery
      1. Associated Threats
      2. Plans
        1. Steps
      3. Maintenance
        1. Test plans
        2. Test Results
    3. Templates
    4. Maintenance
    5. Reports BCM
  12. Database Settings
    1. Database Upgrade
    2. Add Existing
    3. Remove
    4. Migrate
    5. Backup
    6. Restore
  13. Glossary
  14. Calculations

4.4.Assets

After inputting your Business Entities and importing the necessary Contacts, another key piece of data you input into RM Studio is the Asset Registry. Assets are anything that has value, tangible or intangible items that bring value to the organization. An Asset can be as general as “Headquarters Building” or as specific as “HP Server, XpV_2831”.

In RM Studio you define your own Assets, but remember to only include Assets within the scope of your risk management projects. In the Risk Assessment the Assets are selected from the Asset Registry and the Risks are applied based on the predetermined mapping of the Threats to Asset Categories. When you create a new Asset you must select the Asset Categories for the Asset establish the link to the default threats (you can import new threats or edit the IT threat library and the mapping to Categories, as you need).

The release of v5.4 provides a new way to organize the Assets under specific Business Entities, as well as group according to Asset Categories.

How to: Create a Common Asset

    1. Start by left clicking the . Now define your company’s Assets within your scoop for the risk assessment

      Asset Details – Basic Information

    2. Under the Basic Information tab, input a name for the new Asset, keeping in mind to use a unique name for each Asset and some Assets may be grouped together if risks are the same (e.g. individual computers grouped as workstations all).
    3. ID is used to describe specific characteristics of the Asset, such as location, IP or OS version. It is not required to define Assets with ID. However, it will improve oversight and make for easier integration.
    4. Select the Asset Owner from the drop down list that pulls from the Contacts you have added to RM Studio. Description is optional, but it provides a more complete Asset Registry, allowing all RM Studio users and Stakeholders to understand the details of the Asset.

      Asset Details – Categories

    5. Next, you select the Categories tab in Asset Details to assign Asset Categories to the new Asset. The familiar method in RM Studio for applying Asset Categories to an Asset is to use the button to open the popup with the Categories list.
    6. Select all the Categories that apply to the newly created Asset (you can hold ‘Ctrl‘ key and left click all the applicable categories). It is crucial to apply Categories to the new Asset, as this step is a prerequisite for connecting Threats to Assets in the Risk Assessment.

      If you can’t find the appropriate Category or Sub Category, go to Asset Categories under the Common entities and add the new categories or sub-categories you require. Remember to link the new Categories to the relevant threats.
    7. Alternatively, you can use the to add the Categories to the Asset or to change Categories at a later time if you need to. The function uses check boxes for selecting the Categories and there is no need to hold the ‘Ctrl‘ key when selecting more than one Category for the Asset.

      Asset Details – Business Entities

    8. The third tab under Asset Details is for viewing the Business Entities the Asset is assigned to. You are unable to edit which BEs the Asset belongs to in the tab; this task is done directly under the Business Entities – Assets.

      Asset Details – Attributes

    9. The fourth tab under Asset Details is for adding attributes to Assets. This helps with specifying additional data and like ID, helps organize your Assets.

      Asset Details – Attributes

  1. The last tab is the threat tab, there you can see the threats your Asset faces. You can add threats by left-clicking the   icon or remove threats by clicking the Delete icon icon.

Asset relationship visualization

Suggest Edit