What is an asset inventory?
An asset inventory is a list of an organization's hardware, software, cloud resources, and data stores, with an owner for each. It is the base for most other controls, because unknown assets go unpatched and unmonitored. ISO 27001 and the CIS Controls both require one.
What the buyer is really asking
You cannot secure what you do not know about. Describe how you track hardware, cloud resources, and software, and how the list stays current. An inventory pulled automatically from your MDM and cloud accounts beats a manual spreadsheet.
Other ways buyers ask it
Every one of these wants the same answer:
- “How do you inventory and track hardware and software assets?”
- “Do you maintain an asset inventory?”
- “Does each asset have an assigned owner?”
Evidence to have ready
- An asset inventory export
- The MDM and cloud sources that feed it
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.
Related asset and endpoint management questions
- How are company endpoints (laptops and workstations) managed, inventoried, and secured?
- What protections are enforced on managed endpoints (anti-malware, firewalls, disk encryption, screen lock, remote wipe, DLP)?
- What are the allowances and conditions for acceptable use of organization-owned or managed assets?
- Describe your hardware disposal/destruction process.