SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Asset Management

24 controles en 8 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0055CMDB qualitysin mapeos aúnThe company formally maintains a configuration management database as the authoritative source of asset informationRCF-0052Criticality taggingsin mapeos aúnAll assets are formally required to be rated by their importance to business operationsRCF-0043Data inventorysin mapeos aúnAll personal and sensitive data held by the company is formally required to be identified and recordedRCF-0037Hardware inventorysin mapeos aúnAll physical devices used by the company are formally required to be recorded and trackedRCF-0049Ownership & custodianssin mapeos aúnFormal ownership and responsibility is assigned to all significant assets within the companyRCF-0046Service inventorysin mapeos aúnAll internal and external services the company depends on are formally required to be recordedRCF-0058Shadow IT discoverysin mapeos aúnThe company formally prohibits the use of unapproved applications and servicesRCF-0040Software inventorysin mapeos aúnAll software installed or used within the company is formally required to be recorded and licensed

Proceso

RCF-0056CMDB qualitysin mapeos aúnThe CMDB is consistently updated to reflect changes to assets, configurations and relationshipsRCF-0053Criticality taggingsin mapeos aúnCriticality ratings are consistently applied and updated when assets or business priorities changeRCF-0044Data inventorysin mapeos aúnData assets are consistently inventoried and the record is kept current as data flows changeRCF-0038Hardware inventorysin mapeos aúnHardware assets are consistently recorded when purchased, modified or decommissionedRCF-0050Ownership & custodianssin mapeos aúnAsset owners consistently review and confirm the security status of assets under their responsibilityRCF-0047Service inventorysin mapeos aúnService dependencies are consistently documented and reviewed for security and availability riskRCF-0059Shadow IT discoverysin mapeos aúnUnapproved technology is consistently identified and brought into the approved inventory or removedRCF-0041Software inventorysin mapeos aúnSoftware assets are consistently tracked, licensed and removed when no longer needed

Técnica

RCF-0057CMDB qualitysin mapeos aúnTechnical integrations automatically synchronise the CMDB with actual infrastructure and system stateRCF-0054Criticality taggingsin mapeos aúnTechnical tools tag assets with criticality ratings and prioritise alerts and remediation accordinglyRCF-0045Data inventorysin mapeos aúnTechnical tools automatically discover and classify sensitive data across systems and storage locationsRCF-0039Hardware inventorysin mapeos aúnTechnical tools automatically discover and maintain an up-to-date inventory of hardware devicesRCF-0051Ownership & custodianssin mapeos aúnTechnical systems record asset ownership and route security alerts to the appropriate ownerRCF-0048Service inventorysin mapeos aúnTechnical tools automatically map and monitor service dependencies and their security statusRCF-0060Shadow IT discoverysin mapeos aúnTechnical tools continuously scan for unauthorised devices, applications and cloud servicesRCF-0042Software inventorysin mapeos aúnTechnical tools automatically discover installed software and flag unlicensed or unexpected applications
Pregúntale a Sekura: «¿Qué evidencia demuestra Asset Management?»
Conecta tu IA · MCP gratis
https://staging.sekit.ai/api/mcp/crosswalk
  1. En Claude o ChatGPT, añade un conector personalizado y pega esta URL.
  2. Inicia sesión con tu correo para terminar. Gratis, de solo lectura, sin necesidad de organización.