One inventory. Every owner known.
A single asset inventory shared by every module. It is fed by imports, cloud discovery and assessments, matched on reliable identifiers rather than names, and governed with explicit ownership roles and a RACI matrix.
| Asset | Type | Source | Owner |
|---|---|---|---|
| vm-pay-api-01 | Virtual machine | Azure discovery | Payments Eng |
| aks-prod-01 | Kubernetes cluster | Azure discovery | Platform |
| crm.example.com | Application | CSV import | Sales Ops |
| fw-dc1-edge | Security device | Firewall module | Network |
| db-hr-prod | Database | Manual | Unassigned |
Illustration with sample data
What Asset Inventory, Ownership & RACI does
Assets in RiskVantis are one canonical inventory, used by risks, findings, firewall reviews, exposure scans, Policy-as-Code, privacy and the dependency map. Assets come from manual entry, from Microsoft Azure discovery and from assessments that observe them. They can also be imported from Excel, CSV or JSON, with column-mapping suggestions, an optional AI assist on masked samples, five import modes, per-field conflict decisions and a roll-back. Matching uses reliable identifiers. A match on name alone goes to a review queue and is never merged automatically.
Ownership is explicit. About 30 ownership roles in 8 areas, plus a RACI matrix per activity, each with effective dates and history. Inheritance from a group or organisation happens only through a link a person made, and every row shows whether it is direct, inherited or overridden. Ownership gaps are checked on every change and hourly. Nothing is deleted for going missing: an unseen asset becomes Not Seen Recently, then Inactive, and retirement needs a person.
Key capabilities
Canonical inventory
One asset model for every module, with many built-in types and custom attributes.
Import with rollback
Excel, CSV or JSON; create, update, reconcile or dry run; roll back a whole job.
Azure discovery
Discover cloud resources from connected Microsoft Azure subscriptions.
Reliable matching
Identifier-based matching; name-only matches go to a review queue.
Ownership & RACI
About 30 roles in 8 areas plus a RACI matrix, with explicit inheritance.
Governance gaps
Missing owners and single points of failure flagged; acceptances need a reason and an end date.
The business case.
Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Asset Inventory, Ownership & RACI changes for your programme.
Less inventory upkeep
Imports, discovery and reconciliation replace spreadsheet inventories.
Every asset owned
Gaps in ownership and accountability are surfaced automatically.
Authoritative inventory
An inventory with owners underpins many control requirements.
Across modules
Risk, firewall, exposure and privacy all refer to the same asset.
Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.
From setup to outcome.
Bring assets in
Import, discover from Azure or add manually.
Reconcile
Resolve conflicts and review uncertain matches.
Assign owners
Set ownership roles, RACI and inheritance links.
Govern
Close gaps; retire assets through a reviewed workflow.
Supports your obligations.
Asset Inventory, Ownership & RACI contributes evidence and coverage to these frameworks and regulations.
Common questions.
Will imports overwrite what my team entered?
No. Values a person entered or pinned are conflicts you decide in the preview, and a manual override always wins.
Does RiskVantis merge assets with the same name?
No. A name alone is never an identity key; such matches go to the review queue.
Does an asset role grant access to risks or controls?
No. Holding an asset role or a RACI letter never grants access to other records.
Works better together.
Exposure Assessment
Authorised, agentless scans of Linux and Windows servers that discover card data, credentials, exposed keys, expired certificates and configuration issues. The scanner…
Learn more →Platform, Security & IntegrationsIntegrations & API
Connect Microsoft Azure, Entra ID and Microsoft 365 for inventory, identities and continuous checks. Receive findings from other systems, and connect your SIEM or…
Learn more →AI & IntelligenceIntelligence Center & Blast Radius
When a vendor is breached or a vulnerability goes public, the Intelligence Center traces it through your dependency map, covering vendors, sub-processors, assets,…
Learn more →See Asset Inventory, Ownership & RACI in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.