Asset Management

Maintain inventory of critical organizational assets

Asset Management

Asset inventory is foundational to security. You can't protect what you don't know you have.

Asset Register

Track organizational assets including:

  • Endpoints: Workstations, laptops, mobile devices
  • Servers: Physical and virtual servers
  • Cloud Services: SaaS applications and cloud infrastructure
  • Network Equipment: Routers, switches, firewalls
  • Databases: Data stores and repositories
  • OT/ICS Systems: Operational technology and industrial control systems

[Screenshot: Asset Register] Placeholder: Asset inventory table with classification and ownership

Asset Classification

Classify assets by:

  • Type and Subtype: Categorize for easier management
  • Criticality: Business impact if asset is compromised
  • Data Classification: Sensitivity of data on the asset
  • Owner: Who's responsible for the asset

Asset Lifecycle

Track assets through their lifecycle:

  • In Use: Active in production
  • Return Pending: Scheduled for decommissioning
  • Disposed: Securely destroyed or returned
  • Lost: Asset missing or stolen

[Screenshot: Asset Detail] Placeholder: Asset detail view with lifecycle status and relationships

Linking Assets

Connect assets to:

  • Controls: Which security measures protect this asset
  • Risks: Threats targeting this asset
  • Incidents: Security events affecting this asset
  • Vendors: Third-parties providing or supporting the asset
  • Processes: Business processes using the asset

Next Steps