Asset management (ID.AM)

Reiterating what I mentioned previously, you cannot protect what you cannot see. To effectively protect your organization, you must have a grasp on what is in your environment. This requires that you know the various types of hardware and software that are connected to the network and, more importantly, how you go about protecting those assets.

Some of this will also set you up for success in later chapters. As we begin to lay the foundation of asset management, we will categorize and prioritize these assets, too. This will help in incident response or disaster recovery scenarios as you will know what is of most importance to the organization.

ID.AM-01

“Inventories of hardware managed by the organization are maintained.”

This one can sometimes be easier said than done. We must take a holistic view of the environment and understand what is connected to it. We often think about just the hardware or the software, but what about the firmware...