High Table Logo Website

Home / ISO 27001 Templates / ISO 27001 Physical Asset Register Beginner’s Guide

ISO 27001 Physical Asset Register Beginner’s Guide

Last updated Jul 5, 2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

ISO 27001 Physical Asset Register 2022

Table of contents

What is the ISO 27001 Physical and Virtual Asset Register?

You cannot control what you do not know so the ISO 27001 physical asset register is the register of all things that store, transmit or process data. In addition you will need a data asset register. There are some key things to record about assets.

We are going to want to record some basic information like serial numbers, asset owners. Then we want to look at what data the devices process, the classifications of the data, the criticality of devices and more.

We consider all devices including ones people often miss such as removable media, wireless access points, routers, switches.

The Asset Register forms part of the ISO 27001toolkit.

ISO 27001 Physical and Virtual Asset Register Templates

ISO27001 Physical Asset Register Template
ISO 27001 Data Asset Register Template
ISO27001 Asset Management Policy Template
ISO 27001 Toolkit
Get the ISO 27001 Certification Kit >

How to create and use an ISO 27001 physical asset register in under 5 minutes

In this ISO 27001 physical asset register tutorial we show you how to create an ISO 27001 Physical and Virtual Asset Register from scratch in under 5 minutes.

A further tutorial video with a walkthrough of the ISO 27001 physical asset register as a best practice approach on the conent.

Physical Asset Register FAQ

What is an ISO 27001 physical asset register used for?

An ISO 27001 physical asset register is used to record the physical devices that store, process or transmit data through and organisation. It records key control information. We cannot protect what we do not know about so we record all our devices.

How does an information security asset register differ from an accounting asset register?

For information security asset registers we are only interested in assets that process, store or transmit data. An accounting asset register is a register of all assets and by example would include screens, chairs, desks, computer mice.

What does an ISO 27001 physical asset register contain?

A list of assets that process, store or transmit data as well as control information such as – who owns the asset, what it does, what data it processes, what classification it is, what criticality it is, physical characteristics, the date it was last reviewed and by who, the status of encryption and anti virus.

Where can I download an ISO 27001 physical asset register template?

An ISO 27001 physical asset register template can be downloaded from High Table: The ISO 27001 Company.

What is the best format for an ISO 27001 physical asset register?

In our experience a spreadsheet works best, so an ISO 27001 physical asset register xls

Tags:
Stuart Barker, ISO 27001 expert

Stuart Barker
ISO 27001 Expert and Thought Leader

ISO 27001 Toolkit Business Edition
ISO 27001 Jumpstart Kit
ISO 27001 Consultant Toolkit
Stuart Barker, ISO 27001 expert

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.