IT Asset Management
IT assets include systems, people, data and information, infrastructure, networking components, IT-related processes and procedures, and the organization’s reputation. An IS auditor should be able to determine and evaluate how effectively and efficiently IT assets are managed and controlled. The first step in IT asset management is to identify and create an inventory of IT assets. The inventory of an IT asset should include details such as the following:
- Owner of the asset
- Custodian of the asset
- Asset identification
- Location of the asset
- Security classification of the asset
IT asset management is a very important element in designing and developing an effective security strategy and includes both hardware and software. The following are some best practices for IT management:
- The IT department should have a list of approved software that can be installed and used. The installation of unapproved software is a serious violation...
