<?xml version="1.0" encoding="UTF-8"?>
<info>
  <model>
    <key c="org">organisation</key>
    <key c="desc">description</key>
    <key c="resp">responsible</key>
    <key c="ver">version</key>
    <key c="date">date</key>

    <role c="owner">system owner</role>
    <role c="ciso">chief information officer</role>
<!--    <role c="dpo">data protection officer</role>  -->
  </model>

  <asset>
    <key c="desc">description</key>
    <key c="resp">responsible</key>
  </asset>
  <asset family="essential">
    <key c="owner">owner</key>
  </asset>
  <asset family="HW, COM, Media, AUX">
    <key c="location">location</key>
  </asset>
  <asset family="HW, COM, Media, AUX, L, P">
    <key c="number">number</key>
  </asset>
</info>

<assets>
  <layer c="B">Essential assets</layer>
  <layer c="IS">Internal services</layer>
  <layer c="E">Equipment
    <group c="SW">Applications</group>
    <group c="HW">Hardware</group>
    <group c="COM">Communications</group>
    <group c="AUX">Other elements</group>
  </layer>
  <layer c="SS">Subcontracted services</layer>
  <layer c="L">Facilities</layer>
  <layer c="P">Personnel</layer>
</assets>

<sources>
  <source c="lr">legal restrictions</source>
  <source c="nj">not justified</source>
  <source c="nj.1">not worth the money</source>
  <source c="nj.2">more discomfort than benfit</source>
  <source c="nj.3">impractical (unrealistic)</source>
</sources>

