8. Examples
For a cloud-hosted CRM platform, you would indicate the following:
System Name
CRM Platform
System Information
- Description: A customer relationship management platform used by the sales and marketing teams to manage client interactions and data.
- Country/Region: Spain, Europe
- Functional Domain: Sales and Marketing
- Business Unit: Sales Department
- Environment Stage: Production
- Operational Status: Operational
- Criticality: High
- Internet Facing: Yes
System Details
- Architectural Domain: Applications
- System Domain: IT
- System Type: Application
- System Accessibility: External
- System Management: External
- System Hosting: External Shared
- Cloud Type: SaaS
- Cloud Stack Components: Application, Data
Data Classification
- Data Sensitivity: Confidential
- PII Processing: Yes
Recovery Objectives
- Recovery Time Objective (RTO): 4 hours
- Recovery Point Objective (RPO): 15 minutes
From there, select the related systems, link the major related risk assessments, and fill in the complementary information like the system boundaries [Include diagrams or descriptions detailing what is in scope and out of scope].