GRC Cybersécurité 14 points
IT Asset Inventory & Management Audit
Cette liste de contrôle est en anglais.
Audits the accuracy and completeness of hardware and software asset inventories and the processes that keep them current.
CIS v8NIST 800-53ISO 27001
PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.
Hardware Inventory
- Is a complete inventory of enterprise hardware assets maintained? *
- Does the inventory record owner, location, and network address? *
- Is active discovery used to identify assets on the network? *
- Are unauthorized assets detected and addressed? *
Software Inventory
- Is an inventory of all authorized software maintained? *
- Is unauthorized or unsupported software identified and removed? *
- Is software supported and within its vendor lifecycle? *
- Is application allowlisting used where feasible?
Cloud & Non-Traditional Assets
- Are cloud, SaaS, and virtual assets included in the inventory? *
- Are mobile, IoT, and OT devices tracked?
- Is the inventory integrated with a CMDB or authoritative data source?
Lifecycle & Governance
- Is the asset inventory reviewed and reconciled at a defined interval? *
- Are assets securely decommissioned and data sanitized at end of life? *
- Are asset owners assigned accountability for their assets? *
Téléchargez la liste de contrôle IT Asset Inventory & Management Audit complète
Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.