By Russell Lawson, ISO consultant and founder of The Compliance Companion. Russell has helped hundreds of organisations implement ISO 9001, ISO 14001, ISO 45001 and ISO 27001 with less stress and better results. He also owns The Ideas Distillery, an ISO consultancy company helping businesses achieve certification without unnecessary complexity.
One of the questions I often get asked during ISO implementation projects is:
“Do we really need an asset register? What’s it got to do with our management system?”
The truth? More than you think.
Whether I’m helping a business with ISO 9001, ISO 14001, ISO 45001 or ISO 27001, the conversation about assets always comes up. Sometimes it’s about physical equipment. Other times it's about software, facilities, or even people. But in every case, having a clear view of what assets you rely on is central to how you plan, control, and improve your systems.
Let’s break down why the standards ask for it - and how smart businesses are turning their asset registers into powerful management tools.
What is an Asset Register in the Context of ISO?
An asset register isn’t just a list of things you own. In ISO terms, it’s a list of the things that matter to your ability to function and comply with the standard.
That might include:
-
Physical equipment (machinery, tools, vehicles)
-
Digital assets (laptops, software, servers, licences)
-
Facilities (offices, workshops, buildings)
-
Environmental resources (for ISO 14001 – fuel stores, tanks, filters)
-
Safety-critical equipment (for ISO 45001 – PPE, fire alarms, ventilation)
-
Information assets (for ISO 27001 – data, records, cloud systems)
As I often tell clients: it’s not about creating a monster spreadsheet with every last screwdriver in it. It’s about identifying the assets that impact quality, environmental protection, health & safety, or information security — and making sure they’re properly managed.
Why ISO Standards Want You to Track Assets
Each ISO standard approaches asset management slightly differently - but the theme is the same: know what you rely on, and make sure it’s under control.
- ISO 9001 (Clause 7.1.3 & 7.1.5) talks about managing infrastructure and monitoring and measuring resources - which obviously includes equipment and facilities.
- ISO 14001 (Clause 6.1.2 & 8.1) focuses on environmental aspects and operational controls - where knowing which assets could cause pollution or impact compliance is essential.
- ISO 45001 (Clause 7.1.3) requires you to ensure that work equipment and facilities do not pose risks to health and safety.
- ISO 27001 (Annex A 5.9, 5.33, 5.34) is the most detailed - it expects you to identify information assets, assign ownership, classify them, and protect them appropriately.
I’ve seen more than one organisation fail an audit not because they were doing anything wrong - but because they couldn’t demonstrate they knew what assets they were relying on.
Common Pitfalls I See (and How to Avoid Them)
Over the years, I’ve reviewed dozens of asset registers across all sectors - from manufacturing plants to law firms to construction sites. Here are a few of the classic mistakes I’ve come across:
- “We’ve got it all in IT”
Often, the IT department holds the only asset list - but it doesn’t include plant equipment, safety gear, or key environmental controls. Your register should cover all critical business functions, not just technology. - “It’s on a spreadsheet from 2018”
Asset registers that aren’t reviewed regularly quickly become out of date - and irrelevant. A six-monthly or annual review is often enough, and can be easily added to your internal audit cycle or management review. - “We only update it after something breaks”
The point of asset tracking isn’t just for when things go wrong - it’s to prevent failure and help you plan replacements or maintenance before issues arise.
Turning an Asset Register Into a Business Advantage
Here’s where smart businesses stand out. They use their asset register not just for compliance, but to:
- Track asset condition and maintenance dates
- Assign clear ownership and accountability
- Identify ageing equipment before it causes downtime
- Map environmental or safety risks to specific assets
- Support budget planning for upgrades and renewals
During one project I worked on with a construction and facilities contractor, we helped them move from a patchy spreadsheet to a fully integrated asset list covering tools, vehicles, safety equipment, and IT systems. Within months, it was helping them reduce downtime, respond to audits faster, and even lower insurance premiums thanks to better risk control.
It doesn’t have to be complicated - but it does have to be used.
What Makes a Good Asset Register?
Here’s what I recommend including:
-
A clear description of the asset
-
Serial or ID number (if relevant)
-
Assigned owner or custodian
-
Location
-
Risk category (low/med/high depending on impact)
-
Maintenance or calibration needs
-
Date last reviewed
Some of my clients use Excel. Others use asset management software or even MS Lists or SharePoint. The format doesn’t matter - it’s how useful and current it is that counts.
Want an Easier Way to Get This Right?
The Compliance Companion includes ready-made asset register templates aligned with all four ISO standards, plus embedded prompts to help you track the right information - without drowning in detail.
If you’re ready to stop guessing and start managing what matters, take a look:
👉 https://the-compliance-companion.co.uk/harness-the-future-of-iso