How it Works

Understand how Sprinto’s Asset Register works—from auto-discovery to manual uploads—to streamline asset tracking and compliance.

The Asset Register compiles all assets—both auto-discovered and manually added—into a single dashboard, allowing teams to manage asset-based compliance efficiently.

Here’s how it works:

---

Step 1: Assets are auto-discovered from integrations

Once you connect your cloud providers (e.g. AWS, Azure), code repositories (e.g. GitHub, GitLab), or HRMS tools (e.g. Rippling), Sprinto automatically discovers your organisation’s digital infrastructure and people.

The following tabs get populated based on integration data:

• Infrastructure: EC2s, buckets, containers, and other resources

• Staff Devices: Employee laptops and machines

• Code Repos: Project repositories hosted on Git platforms

• People: Staff directory synced from HRMS or IDP

Each asset comes tagged with metadata like classification (Production/In Scope), owner, and added date.

---

Step 2: Add assets that are not auto-discovered

Some assets—such as backup generators, CCTV systems, or legacy servers—can’t be automatically pulled via integrations.

You can add them manually from the Custom assets tab using either of these options:

• Individually: Fill out a simple form with fields like asset ID, name, owner, classification, and group.

• Bulk upload: Download the CSV template, fill it with asset details, and upload to import multiple records at once.

---

Step 3: Classify assets and assign ownership

Whether discovered or added manually, each asset can be:

• Classified as In Scope or Out of Scope

• Grouped into categories for reporting

• Assigned to an owner for accountability

These actions ensure that only relevant assets are monitored, and the right people are responsible for evidence submissions.

---

Step 4: Use assets across compliance modules

Once assets are in place, Sprinto links them to compliance modules like:

• Monitoring checks

• Workflow evidence

• Risk assessments

This makes it easy to meet auditor requirements, assign reviews, and respond to incidents with asset-level traceability.