Alex · Tenant admin
One Service. Two Responsibilities.
The payroll gateway names Alex as business owner and Sam as technical owner. Their responsibilities sit beside the service identity, so the next conversation starts with the right people.
Know The Asset. Know Who Answers For It.
Connect ownership, classification and review to the service your business depends on.
Payroll gateway
Business owner
Technical owner
Classification
Service context
An Inventory Needs More Than A List Of Systems.
Northstar’s payroll gateway transfers authorised employee changes to its supplier. Alex understands the business responsibility; Sam maintains the technology. A useful record explains both perspectives, the information involved and who must respond when something changes. Listing the gateway does not establish that it is protected.
Register the business context.
Record the service, department, technical identifier, hosting, exposure, criticality and information classification.
Asset steward · Tenant adminHow it works
Record the service, department, technical identifier, hosting, exposure, criticality and information classification. Assign active business and technical owners. A governed record starts registered, awaiting review; creation alone does not activate it.
Confirm each responsibility.
Submit the prepared profile for review.
Business owner · Technical ownerHow it works
Submit the prepared profile for review. Alex confirms business ownership; Sam confirms technical ownership. Each named owner acknowledges their own responsibility. The asset manager can activate the record only after both confirmations are present.
Connect the relevant records.
Within the permitted project, relate applicable controls, policies, risks, evidence, suppliers and dependencies to the asset.
Permitted asset managerHow it works
Within the permitted project, relate applicable controls, policies, risks, evidence, suppliers and dependencies to the asset. Retain the reason for each governed relationship. Shared business context does not bypass the linked record’s access permissions.
Review changes and due work.
Use attention signals and review dates to find work that needs a decision.
Asset steward · Named ownersHow it works
Use attention signals and review dates to find work that needs a decision. Material changes to ownership, classification, exposure or other governed profile fields clear earlier confirmations and return active records to change review. Owner changes require a reason.
Keep observations in context.
Where source intake is enabled, preview supported exports before committing them.
Inventory source reviewerHow it works
Where source intake is enabled, preview supported exports before committing them. A matching observation preserves the accepted profile; a new candidate still needs owners and review. Source comparisons cover name and type, with freshness shown separately.
Retire with evidence.
Plan retirement, then document shutdown, credentials, retention and supplier closure.
Asset manager · Both ownersHow it works
Plan retirement, then document shutdown, credentials, retention and supplier closure. Resolve dependency, scope and finding blockers. Approved evidence and fresh confirmations from both named owners precede finalisation by an authorised manager. The archive retains the record and decision history.
Read The Detail Behind The Status.
Choose a record. See what it means, who is responsible and what still needs to happen.
Read the complete record story
One Service. Two Responsibilities.
Alex · Tenant adminThe payroll gateway names Alex as business owner and Sam as technical owner. Their responsibilities sit beside the service identity, so the next conversation starts with the right people.
Payroll gateway profile with separate business and technical owners.
Open the original product screenA Lifecycle Decision Has A Basis.
Alex · Tenant adminBoth confirmations are retained with the lifecycle view. Later planning does not erase accountability or turn a retirement intention into a completed archive.
English capture: active after both confirmations. The Arabic capture shows later retirement planning.
Open the original product screenPlanning Is Not Completion.
Alex · Tenant adminThe retirement dossier is still empty. The live check requires completion evidence and a retention date. The team must document and confirm the work before finalisation becomes possible.
An unfinished retirement dossier, with its current blocker and required fields.
Open the original product screen
Make The Next Decision Easier.
Use each signal for the question it actually answers.
Classification guides responsibility.
Criticality, sensitivity and exposure describe the asset’s context. A complete profile is not proof of effective protection.
Relationships explain impact.
Project-specific links show what depends on the asset and which assurance records apply. A patch baseline covers only its declared assets and updates.
Freshness prompts a review.
A stale source needs attention. It does not prove the system disappeared, changed ownership or can be retired.
Govern The Decision. Retain The Evidence.
PlanGRC records accountability and lifecycle decisions. It does not discover every system, execute shutdowns, remove credentials or enforce storage retention. Supported intake includes reviewed CSV and offline ServiceNow JSON; this is not a live inventory synchronisation service.
Questions Worth Asking.
Does importing an asset make it active?
No. New candidates remain registered with unassigned owners. Matching observations preserve existing master fields. Enabled intake requires preview and a recorded review decision.
Does assigning an owner grant access?
No. Ownership names a responsibility. Role and granted scope determine access; an organisational assignment does not independently provide permission.
What happens when the profile changes?
Material governed changes invalidate earlier confirmations. Active records return to change review so the named owners can confirm the updated facts before reactivation.
What remains after final retirement?
The application retains a read-only asset archive, history, links and evidence snapshots. It does not delete the underlying system or automatically close related findings.
Start With One Important Service.
Bring its asset list, owners and current review problem. Walk through registration, responsibility and the next lifecycle decision in a focused demo.