IT assets include systems, data, networking components, and IT-related processes and procedures. An IS auditor should be able to determine and evaluate how effectively and efficiently IT assets are managed and controlled. The following are some of the important concepts of IT asset management:
- IT assets include people, information, infrastructure, and reputation.
- The first step in IT asset management is to identify and create an inventory of IT assets.
- The inventory of an IT asset should include details such as the following:
- Owner
- Custodian
- Asset identification
- Location
- Security classification
- IT asset management is a very important element in designing and developing an effective security strategy.
- IT asset management includes both hardware and software.
- The IT department should have a list of approved software that can be installed and used. The installation of unapproved software is a serious violation that carries major legal, financial, and security risks...
