Asset Registry

The Systems and Environments responsible for storing, processing, transferring and protecting the Information Assets, and the types of User Accounts that can compromise them.

Platform Teams

The Platform Teams typically align with the teams, departments or organisational units that are responsible for individual systems. The Platform Team corresponds to the Owner or Custodian of System Assets.

Environments

The Environments to which the Systems are deployed. Different Environments typically have separate controls applied to them, such Dev, Prod and PCI environments.

Systems

The Systems responsible for storing, processing, transferring and protecting the Information Assets via Security Controls.

Information Assets

The Information Assets that need to be protected by the Systems and Environments with Controls commensurate to the risk associated with each Information Asset Classification.

User Account Types

The types of User Accounts that can potentially compromise the Confidentiality, Integrity or Availability of the Environments, Systems and Information Assets.