Information Asset Register

Updated 27.01.2026

A document forming part of the Immercial IMS.

9. Information Asset Register

Document Name: Information Asset Register
Version: 1.0
Approved by: Directors, Immercial Limited
Review Frequency: Annual or upon material change


9.1 Purpose

The Information Asset Register identifies and records the key information assets used by Immercial Limited to deliver its services and operate securely.

This register supports risk assessment, information security management, and compliance with ISO 27001 requirements.


9.2 Scope

The register applies to information assets that are:

  • Owned, created, or managed by Immercial

  • Used in the delivery of consultancy services

  • Stored, processed, or transmitted digitally

  • Relevant to quality, security, or continuity of operations


9.3 Asset Categories

Information assets may include, but are not limited to:

  • Client commercial data and project information

  • Proprietary methodologies (including the IMME Methodâ„¢)

  • Templates, schedules, and benchmarks

  • Digital platforms and portals

  • AI models, prompts, and training data (where applicable)

  • Cloud storage environments (e.g. OneDrive)

  • End-user devices

  • Software and licensed tools


9.4 Register Structure (Record Format)

The Information Asset Register is maintained as a spreadsheet and includes, as a minimum:

  • Asset ID

  • Asset name / description

  • Asset owner

  • Location / system

  • Data type (e.g. client, IP, operational)

  • Confidentiality level (low / medium / high)

  • Availability requirement

  • Notes or comments


9.5 Asset Ownership

Each information asset is assigned an owner responsible for:

  • Understanding how the asset is used

  • Ensuring appropriate controls are applied

  • Supporting risk assessment and review

For micro-company operations, asset ownership may be assigned to senior management where appropriate.


9.6 Review & Maintenance

  • The register is reviewed at least annually or when significant changes occur.

  • New assets are added when introduced.

  • Assets no longer in use are removed or archived.


9.7 Records & Evidence

The completed Information Asset Register itself forms the primary record and evidence of compliance.

Immercial Limited