サイバーセキュリティGRC 14項目
IT Asset Inventory & Management Audit
このチェックリストは英語版です。
Audits the accuracy and completeness of hardware and software asset inventories and the processes that keep them current.
CIS v8NIST 800-53ISO 27001
無料のPDFまたはWord・メールアドレスを入力してダウンロード。
Hardware Inventory
- Is a complete inventory of enterprise hardware assets maintained? *
- Does the inventory record owner, location, and network address? *
- Is active discovery used to identify assets on the network? *
- Are unauthorized assets detected and addressed? *
Software Inventory
- Is an inventory of all authorized software maintained? *
- Is unauthorized or unsupported software identified and removed? *
- Is software supported and within its vendor lifecycle? *
- Is application allowlisting used where feasible?
Cloud & Non-Traditional Assets
- Are cloud, SaaS, and virtual assets included in the inventory? *
- Are mobile, IoT, and OT devices tracked?
- Is the inventory integrated with a CMDB or authoritative data source?
Lifecycle & Governance
- Is the asset inventory reviewed and reconciled at a defined interval? *
- Are assets securely decommissioned and data sanitized at end of life? *
- Are asset owners assigned accountability for their assets? *
IT Asset Inventory & Management Auditチェックリストの完全版をダウンロード
印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。