Feature 1
Identify the assets that matter
Create a usable inventory with enough ownership and classification context to support decisions.
- Record asset purpose
- Assign an owner
- Set classification and criticality


Capability
Maintain the information, systems, services and other resources the organisation depends on.

The outcome
Understand which assets matter, who owns them and the risks, suppliers and controls connected to them.
How it helps
This capability connects with the wider Apollo platform, so information can support action, evidence and reporting without being entered again.
Feature 1
Create a usable inventory with enough ownership and classification context to support decisions.


Feature 2
Relate each asset to the suppliers, risks and controls that explain how it is protected.


What is included
Use the capability you need now while keeping its records, work and evidence ready for related capabilities across Apollo.
Included features
Connected platform
See where this capability is available and the related capabilities and solutions that use the same connected information.
Maintain the risks the organisation manages, with ownership, scoring, treatment and connected context in one current register.
Explore capabilityMaintain the measures used to reduce risk and support compliance requirements, including ownership, implementation and review.
Explore capabilityMaintain the third parties the organisation relies on, their services, data context, ownership and review status.
Explore capabilityQuestions and answers
Practical answers to common questions about managing this responsibility well.
Understand which assets matter, who owns them and the risks, suppliers and controls connected to them.
It should cover asset records and ownership, asset library, classification and criticality, cia context and related risks, controls and suppliers, with enough context to support action and explain decisions.
Ownership should sit with the person who can make decisions and keep the information current. A specialist or governance team may provide the method, but accountability should not be left with an unnamed group.
Set review dates according to risk and reassess after relevant incidents, material change, new evidence or overdue follow-up work. Preserve the history so changes remain explainable.
Keep the source information, owner, review and approval history, supporting documents and resulting actions needed to show what was considered and what happened next.
Book a focused demonstration and we will show how the capability fits your current responsibilities, existing information and next practical priorities.