In this lesson,
we will learn about Asset Control.
Asset control involves maintaining a detailed inventory
and continuously validating the security status
of all assets within the network
to ensure they comply with security policies
and are protected against threats.
Asset control concepts include Asset Identification,
Asset Management, and Attestation.
Let's learn more about these asset control concepts.
First, we have Asset Identification.
Asset identification is the first step in asset control.
It involves cataloging all devices,
applications, and data within the network
to create a comprehensive inventory.
In an enterprise, this means identifying every computer,
mobile device, server, application,
and data source connected to the network.
To do this, organizations use various tools and techniques
to discover and track assets automatically.
Network scanning tools like Nmap or Nessus
can be used to scan the network
and identify connected devices,
such as laptops, desktops, printers, and servers.
For software inventory,
tools like the Microsoft System Center Configuration Manager
can track which applications are installed on each system.
In the cloud or in hybrid environments,
cloud management platforms,
like AWS Asset Manager or Azure Resource Manager,
can help catalog and manage cloud-based resources
such as virtual machines and databases.
Additionally, endpoint detection and response tools,
like CrowdStrike or SentinelOne,
can provide a continuous inventory of all endpoints,
including details about the device's security posture.
These tools often integrate
with centralized asset management systems
to provide a realtime view
of all assets within the enterprise network.
By continuously updating the asset inventory,
organizations ensure
that they have a current and accurate picture
of all devices, applications, and data sources.
This is very important for maintaining network security
and compliance in a zero trust environment.
Second, we have Asset Management.
Asset management involves the ongoing process
of monitoring and maintaining identified assets
to ensure they are secure and compliant.
This includes applying the latest security updates,
ensuring correct configurations,
and adhering to security policies.
In a zero trust model, this means continuously monitoring
the health and status of each asset
to prevent vulnerabilities.
Asset management uses tools,
like Microsoft Windows Server Update Services, or WSUS,
for patch management, and to deploy and verify updates.
Next, configuration management tools,
such as Ansible, Puppet, or Chef,
can be used to enforce consistent settings across devices.
Then endpoint management solutions,
like Microsoft Intune or VMware Workspace ONE,
can monitor compliance
and automatically remediate security issues.
Finally, centralized platforms,
like ServiceNow or SolarWinds, track assets,
integrating with security tools
to provide real time updates
on the status and compliance of each asset.
Third, we have Asset Attestation.
Asset attestation verifies the security posture
and compliance of assets within the network
to ensure they meet required security standards.
This process involves regular checks
or real-time assessments
to validate that devices, applications, and data
are secure, correctly configured,
and compliant with security policies.
Asset attestation is implemented using various tools.
For example, endpoint detection and response solutions,
like CrowdStrike or SentinelOne,
can continuously monitor assets for compliance,
detecting missing updates or unauthorized configurations,
and triggering alerts or corrective actions.
Next, Security Information and Event Management
or SIEM platforms, like Splunk or IBM QRadar,
can analyze security data, providing real-time insights
into compliance failures, or security threats.
Finally, compliance scanning tools, like Tenable or Qualys,
can perform continuous vulnerability scans
and compliance checks against benchmarks,
like the Center for Internet Security or CIS guidelines.
In application, an organization may perform
continuous attestation of devices,
checking that they have up-to-date antivirus software,
encryption enabled,
or specific configurations that align with company policies.
If a device fails attestation, it might be quarantined
or denied access to sensitive resources
until it meets those compliance requirements.
This ensures that only secure and compliant assets
are allowed to operate within the network.
So remember, asset control
involves maintaining an up-to-date inventory
of all devices, applications, and data within a network,
and continuously validating their security status
to ensure compliance with security policies.
Asset control includes three key concepts,
asset identification, asset management,
and asset attestation.
Asset identification
involves cataloging all connected assets
to create a comprehensive inventory,
using tools like network scanners
and cloud management platforms.
Asset management focuses
on continuously monitoring and maintaining these assets
to ensure they are updated, correctly configured,
and compliant with security policies,
using patch management, configuration management,
and endpoint management tools.
Finally, asset attestation
verifies the security and compliance of assets
through regular checks or real-time assessments,
using tools that detect vulnerabilities,
assess compliance, and enforce security standards
to keep the network secure in a zero trust environment.