Asset and Access Register
Use one row for each consequential account, system, data source, phone number, domain, profile, or media library. Never place credential values, recovery codes, or private password-manager links in this register.
| Field | Record |
|---|---|
| Asset or system | |
| Business purpose | |
| Exists / publicly visible | Yes / No / Unknown; observation and source |
| Accurate for the intended use | Yes / No / Unknown; verifier |
| Company-owned primary account | Yes / No / Unknown |
| Company administrator | |
| Backup administrator | |
| Current operators or vendors | |
| Billing owner and renewal | |
| Password-manager item reference | |
| Recovery method tested | Yes / No / Not applicable |
| Evidence level | Public-observed / Document-supported / Account-verified / Operationally tested |
| Export or backup location | |
| Source-asset or data rights confirmed | Yes / No / Unknown |
| Transfer or vendor-exit requirement | |
| Last verified | |
| Next review | |
| Open risk and owner |
Minimum critical inventory
- Domain registrar and DNS
- Website hosting, repository, forms, and analytics
- Company email and shared storage
- CRM, call tracking, scheduling, and reporting
- Google Business Profile and major listings
- Advertising and social accounts
- Photography, video, design files, licenses, and releases
- Phone numbers, tracking numbers, and billing relationships
Verification check
For critical assets, confirm that the named company administrator can sign in through the approved process, view billing, add or remove access, locate recovery options, and export what the company needs. Do not trigger unnecessary password resets or copy secrets into evidence.
Keep the states separate:
- Exists means the asset or public surface can be found.
- Accurate means its content and configuration fit the intended business use.
- Controlled means the company has the necessary administrative, billing, recovery, and transfer authority.
- Operationally tested means the real path, such as a lead handoff, export, recovery, or access removal, worked under a bounded test.
- Verified means the exact acceptance check passed recently enough for the decision.
A login proves access for that person at that moment. It does not by itself prove ownership, recovery, data quality, lead delivery, or vendor-exit readiness.
Any Unknown, vendor-owned primary account, single-person dependency, missing rights record, or untested recovery path needs an owner and decision date. Link the adopted work to Marketing Asset Control and Continuity.