Manage your IT systems and assets centrally – including AI-assisted protection needs assessment for confidentiality, integrity, and availability. Keep hardware, software, and cloud services continuously up to date and maintain your entire IT inventory as a living foundation for risk analyses and audits.
ASSET MANAGEMENT
Complete documentation of all IT assets is the foundation of an effective ISMS. Capture all IT assets centrally – from servers to workstations to cloud services – with responsibilities and provider details, and assign them to appropriate categories.
PROCESS INTEGRATION & COMPLIANCE
Assign systems to business processes and identify dependencies at a glance. Revisions on every approval with change comparison support audits and meet compliance verification requirements.
ISMS COCKPIT
The "Assets" tab in the ISMS cockpit shows your system inventory from the perspective of standards conformity: which requirement catalog an asset is assigned to, which protection requirement it carries and how many modules follow from it. The protection requirement is inherited across the asset tree, so subordinate systems are not classified below their parent object.
FAQ
A structured form guides you through responsibilities, manufacturer and supplier contacts, vendor details, description and purpose, hosting and location, operating systems and client management, as well as encryption, accessibility, NIS2 relevance and vulnerabilities. The linked technical and organizational measures complete the record. Systems can be categorized, arranged into parent and child systems and connected through data flows. The BSI asset type appears as a column in the overview and in the export.
For the protection goals of confidentiality, integrity and availability, you assess damage scenarios in a matrix; the overall protection requirement follows the maximum principle. Linked systems are taken into account, including the accumulation effect. You classify manually or with AI support and review the result before you adopt it – the decision stays with you. You can export the assessment as PDF or DOCX with a summary, the damage scenario matrix and the inherited sources.
In line with BSI Standard 200-2, the protection requirement is inherited across the entire asset tree, so child systems are never classified below their parent system. If you deliberately set a manual classification for an asset, it applies to that asset only. The export of the protection requirements assessment lists the inherited sources, so auditors can trace where a classification comes from.
In the “Requirements” section of an asset, you assign individual requirements or entire modules; the BSI IT-Grundschutz modules can be filtered by layer, for example “Operations” or “IT systems”. Key figures show the assessment status, and one requirement can be assessed for many assets at once. If you change the BSI asset type, the selection points out modules and requirements that no longer fit and removes them only after you confirm.
Yes. preeco | information security and preeco | data protection share one platform. If you license both products, the additional “Data processing systems” view covers the systems relevant to data protection, and a switch toggles your workspace between the information security and the data protection view. Information security officers and data protection officers maintain the same system inventory instead of reconciling two lists.
preeco handles data migrations from legacy systems as an individual project: the source systems and data formats are analyzed, the data structures are mapped, a customer-specific import routine is developed and, after test runs, imported into production. Support with data migration is optional and charged separately. Alternatively, you enter your systems directly via the structured form and build up the inventory step by step.
Every time an asset is released, preeco automatically creates an immutable revision. Two revisions can be compared visually, with additions shown in green and removals in red; a stored SHA-256 checksum reveals any subsequent alteration. Comparison and integrity checks apply to revisions created since this feature was introduced. The activity log additionally shows who performed which action and when.
In a personal consultation, we'll show you how preeco | information security simplifies your security management.