Identifying assets

Hardware assets

Endpoints:

Laptops, desktops, tablets, and mobile devices used by employees

Servers and storage systems/devices:

Physical servers in data centres and virtual machines hosting critical applications

Network devices (routers, switches, firewalls)

Peripheral Devices:

Printers, scanners, IoT devices, and specialized hardware

Cloud-Connected Hardware:

On-premises devices integrated with cloud services

Software assets

Applications:

General programs used by the company

Security settings:

Access control lists, and system configurations, password managers

Operating Systems:

Windows, Linux, macOS, and their versions

Security Tools:

Antivirus, EDR, SIEM, vulnerability scanners

Cloud-Connected Hardware:

On-premises devices integrated with cloud services

Custom applications:

In-house or designed software or scripts for specific use

Data assets

Customer Data:

Personally Identifiable Information (PII), payment details

Intellectual Property:

Trade secrets, product designs, source code

Operational Data:

System logs, configurations, and performance metrics

Regulated Data:

GDPR, HIPAA, PCI-DSS governed information

Backups & Archives:

Offline and cloud-based backups, disaster recovery copies

Data Classification:

Public, internal, confidential, and restricted categories