Software Technologies Inventory and Attributes

Applicable Regulations

[Multi-Value]

Description — The external regulations or standards that attach to this technology because of what it does or what data it handles.

Benefit(s) — Establishes which technologies sit inside a regulated boundary, so oversight is applied where it is actually required.

Source — Manual or Derived.

Notes — Typed references to the regulatory agencies inventory where it exists. Leave empty for the majority of technologies rather than recording an absence.

Description — Whether the technology currently meets its applicable obligations.

Benefit(s) — Makes compliance position reportable from the inventory rather than reconstructible only at audit time.

Source — Manual.

Examples — Compliant, Non-Compliant, Under Review, Not Applicable

Notes — Populate only where regulations apply. Not Applicable is meaningfully different from empty.

Certifications Held

[Multi-Value]

Description — Certifications or accreditations the technology or its supplier holds.

Benefit(s) — Supplies evidence that supports the enterprise's own compliance position without re-establishing it from scratch.

Source — Manual.

Notes — Record the certification and its expiry; a lapsed certification supports nothing.

Description — Reference to audit findings raised against this technology.

Benefit(s) — Connects the technology record to the remediation work already committed, so findings are not tracked in isolation.

Source — Manual.

Notes — Reference the finding record rather than restating its content.

Description — When compliance for this technology was last formally attested.

Benefit(s) — Establishes whether a compliance status is current, which is what regulators and auditors actually ask.

Source — Manual.

Notes — A compliance status older than the attestation cycle should be treated as unconfirmed.