Asset Management

Asset Management: Inventories and manages hardware, software, cloud resourcesCloud ResourceA provisioned cloud object such as a workload, identity, storage service, network, or key., and their security status. The term falls under the organizational governance of information security. ResponsibilitiesResponsibilityAn explicitly assigned obligation to make, perform, or verify a security decision or task., mandatory requirements, measurable goals, evidence, and continuous improvementContinuous ImprovementThe recurring use of findings and measurements to improve security capabilities over time. are key components.

How it works and where it fits

Asset Management denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

Related concepts

• CAASMCAASMPlatform approach for the inventory, correlation, and assessment of security-relevant assets.: Platform approach for the inventory, correlation, and assessment of security-relevant assets.
• External Attack Surface ManagementExternal Attack Surface ManagementIdentifies and monitors assets and risks accessible from the Internet.: Identifies and monitors assets and risks accessible from the Internet.
• Vulnerability ManagementVulnerability ManagementContinuous process for the detection, prioritization, remediation, and tracking of vulnerabilities.: Continuous process for the detection, prioritization, remediation, and tracking of vulnerabilities.
• Cloud Security Posture ManagementCloud Security Posture ManagementDetects misconfigurations and compliance deviations in cloud environments.: Detects misconfigurations and compliance deviations in cloud environments.