Application Asset Module

Overview

The Application Asset module enables tracking of all software applications within your organization, including internal apps, purchased software, custom solutions, and SaaS subscriptions.

Key Features

Application inventory management
Application type categorization
Vendor and license tracking
Criticality assessment
Risk and control association
Department mapping
Technical details documentation
Lifecycle status tracking

Creating an Application Asset

To register a new application:

Navigate to Asset - Application Asset
Click Add Application
Fill in application details:
- Application ID - Unique identifier
- Name - Application name
- Type - Application type (Web, Desktop, Mobile, SaaS)
- Vendor - Software vendor/provider
- Version - Current version
- Description - Application purpose
- Criticality - Business criticality level
- Status - Current status
Click Submit

Application Types

Categorize applications:

Web Application - Browser-based applications
Desktop Application - Installed software
Mobile Application - Mobile apps
SaaS - Cloud-based subscriptions
Custom/Internal - Internally developed solutions

Application Detail Page

The detail page shows:

Basic Information - Application metadata
Technical Details - Architecture, hosting, dependencies
Ownership - Owner, custodian, department
Risk Controls - Associated risks and controls
Security Controls - Security measures in place

Risk and Control Tab

Manage application risks:

Go to Control tab
Add risk controls specific to the application
Add security controls
Document control effectiveness

Criticality Assessment

Assess application criticality:

Critical - Core business operations depend on it
High - Important for daily operations
Medium - Supports business functions
Low - Nice to have, not essential

Best Practices

Maintain accurate version information
Track license expiration dates
Document dependencies between applications
Regularly review application inventory
Associate applications with business processes
Link to relevant security controls