Asset System Attributes Guide

An asset inventory is a record of an application or system, either internal or third-party, that is used to collect, store, process, or access personal data in support of various business processes. An asset is any entity that processes personal data, such as a website, database, or even a file cabinet.

OneTrust features out-of-the-box attributes that you can activate to gather specific information on your organization's assets. These attributes will display on an asset record's Inventory Details screen and can be updated manually, through bulk update, via assessment response, or using an API.

Attributes in bold are required when creating an asset inventory record. Attributes identified as editable can be edited directly on the Inventory Details screen.

The following attributes are available for use with asset inventory records:


Attribute	Description	Type	Editable
Aggregate Risk Level	How likely is it that this asset could expose personal information? To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring. Note: This attribute determines what risk level displays for the asset.	Single-Select	No
Aggregate Risk Score	Overall risk score associated with the asset. To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring. Note: This attribute determines what risk score displays for the asset.	Text	No
Aggregated Inherent Risk Level	Overall inherent risk level associated with the asset. To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring.	Single-Select	No
Aggregated Inherent Risk Score	Overall inherent risk score associated with the asset. To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring.	Text	No
Aggregated Target Risk Level	Overall target risk level associated with the asset. To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring.	Single-Select	No
Aggregated Target Risk Score	Overall target risk score associated with the asset. To learn how this attribute is calculated, see Risks Settings and Setting Up Risk Scoring.	Text	No
Created By	Name of the user who created the record.	Single-Select	No
Created Date	Date when the record was created.	Date	No
Data Disposal	How is the data destroyed or archived?	Single-Select	Yes
Data Retention	Data retention time period.	Text	Yes
Description	Description of the asset.	Text	Yes
External ID	This field contains a unique identifier for the record from a system outside of OneTrust.	Text	Yes
Hosting Location	Physical or hosting location of the asset. Note: This attribute determines where the asset will display on the Asset Map and Cross-Border Map.	Single-Select	Yes
Hosting Provider	Who is the hosting provider?	Single-Select	Yes
Hosting Type	Is this asset hosted on-premises or externally on cloud?	Single-Select	Yes
ID	This field contains a unique identifier for the record of a particular inventory type.	Text	No
Internal or 3rd Party	Is this an internal or third-party asset?	Single-Select	Yes
Is Master	Indicates if an inventory is a parent/master record.	Single-Select	No
IT Owner	Technical individual responsible for the asset. Note: This attribute will pre-populate when an inventory assessment is launched for the asset.	Single-Select	Yes
Last Updated By	Name of the user who last updated the record.	Single-Select	No
Last Updated Date	Date when the record was last updated.	Date	No
Managing Organization	OneTrust organization group that this asset is related to. Note: This field will affect access control and the ability to view and edit this asset.	Single-Select	Yes
Master Record	Master inventory inventory record to which the asset record belongs (if a local version).	Text	No
Name	Name of the asset.	Text	Yes
Organizational Security Measures	Organizational security measures in place to protect personal data.	Multi-Select	Yes
Other Security Measures	Description of any additional security measures in place to protect personal data.	Text	Yes
Status	Status of the asset.	Single-Select	No
Storage Format	In what format is personal data stored in this asset?	Multi-Select	Yes
Technical Security Measures	Technical security measures in place to protect personal data.	Multi-Select	Yes
Type	The type of asset represented (e.g., physical storage, website, application, etc.)	Single-Select	Yes
Volume of Data Subjects	Volume of data subjects stored in the asset.	Single-Select	Yes