Citation
NIST Special Publication 1800-5: (DRAFT) IT Asset Management (Oct. 29, 2015) (full-text).
Overview
The National Cybersecurity Center of Excellence (NCCoE) invites comments on a draft practice guide designed to help financial services companies monitor and manage IT hardware and software assets more securely and efficiently.
Financial institutions can employ large numbers of people who use a variety of technology devices and applications across a wide geographic area. While these physical assets can be labeled and tracked using bar codes and databases, knowing what systems and applications are running on these devices is a much larger challenge. The inability to track the location and configuration of networked devices and software can leave an organization vulnerable to security threats.
The draft guide demonstrates how commercially available technologies can be used to track the location and configuration of networked devices and software across an organization.