This site uses cookies to improve your experience. To help us insure we adhere to various privacy regulations, please select your country/region of residence. If you do not select a country, we will assume you are from the United States. Select your Cookie Settings or view our Privacy Policy and Terms of Use.
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Used for the proper function of the website
Used for monitoring website traffic and interactions
Cookie Settings
Cookies and similar technologies are used on this website for proper function of the website, for tracking performance analytics and for marketing purposes. We and some of our third-party providers may use cookie data for various purposes. Please review the cookie settings below and choose your preference.
Strictly Necessary: Used for the proper function of the website
Performance/Analytics: Used for monitoring website traffic and interactions
How are we currently tracking all our network-connected assets, managing product life cycle and assigning accountability for management and maintenance of these devices? Is this transparent to the wider business and in particular cybersecurity teams?
We chase concepts that seem simple, such as "basic" network hygiene, assetmanagement, and patching. But these approaches rely on tenets based on traditional operational and financial risk management. While “close enough” works in assetmanagement for financial inventory, it can quickly prove useless in cybersecurity.
When an organization understands the business context, resources that support critical functions, and related cybersecurity risks, it can focus and prioritize its risk management strategy and business needs. These activities include assetmanagement, business environment, governance, risk assessment, and risk management strategy.
For example, a forensic finding made during an evaluation of Colonial Pipeline noted numerous known and preventable vulnerabilities, such as unpatched and outdated systems, that likely led to the security breach. AssetManagement. Having multi-factor authentication also limits unauthorized users to access data.
Assessing your network for security vulnerabilities is also urgent. Best practices suggest that the inventory be maintained in an assetmanagement system with a configuration management database (CMDB). Typically, you should replace IT hardware about every three to five years.
Protecting Assets: Internal controls, especially those related to assetmanagement and security, protect an organization’s assets from theft, misuse, or loss. This not only safeguards shareholder value but also ensures that assets are used effectively for business purposes.
8 – AssetManagement. AssetManagement, Annex A.8 This section addresses how organizations define acceptable information protection obligations and identify information assets. Technical vulnerabilitymanagement is covered in Annex A.12.6, These are the control sets of Annex A : Annex A.5
SR – Supply Chain Risk Management : Managing risks from the supply chain to reduce vulnerabilities. Identify: Develop the organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities. You’ve identified and documented the vulnerabilities to your assets.
SR – Supply Chain Risk Management : Managing risks from the supply chain to reduce vulnerabilities. Identify: Develop the organizational understanding to manage cybersecurity risk to systems, assets, data, and capabilities. You’ve identified and documented the vulnerabilities to your assets.
Software updates and patches: Renewals give you access to the latest updates, including patches for vulnerabilities, stability improvements, and new features that enhance functionality and efficiency. Save all renewal-related documents in a centralized location, such as a shared drive or assetmanagement system.
We organize all of the trending information in your field so you don't have to. Join 25,000+ users and stay up to date on the latest articles your peers are reading.
You know about us, now we want to get to know you!
Let's personalize your content
Let's get even more personalized
We recognize your account from another site in our network, please click 'Send Email' below to continue with verifying your account and setting a password.
Let's personalize your content