网络安全 GRC 14 项
IT Asset Inventory & Management Audit
此检查清单为英文版。
Audits the accuracy and completeness of hardware and software asset inventories and the processes that keep them current.
CIS v8NIST 800-53ISO 27001
免费 PDF 或 Word · 输入邮箱即可下载。
Hardware Inventory
- Is a complete inventory of enterprise hardware assets maintained? *
- Does the inventory record owner, location, and network address? *
- Is active discovery used to identify assets on the network? *
- Are unauthorized assets detected and addressed? *
Software Inventory
- Is an inventory of all authorized software maintained? *
- Is unauthorized or unsupported software identified and removed? *
- Is software supported and within its vendor lifecycle? *
- Is application allowlisting used where feasible?
Cloud & Non-Traditional Assets
- Are cloud, SaaS, and virtual assets included in the inventory? *
- Are mobile, IoT, and OT devices tracked?
- Is the inventory integrated with a CMDB or authoritative data source?
Lifecycle & Governance
- Is the asset inventory reviewed and reconciled at a defined interval? *
- Are assets securely decommissioned and data sanitized at end of life? *
- Are asset owners assigned accountability for their assets? *
下载完整的IT Asset Inventory & Management Audit检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。