Does your organization maintain comprehensive inventories of all hardware assets, including IT equipment, IoT devices, operational technology (OT), and mobile devices?

A complete hardware inventory is fundamental to effective security management as it provides visibility into all assets that need protection and could represent potential attack vectors. This inventory should include details such as device type, location, owner, operating system, network information, and security status for all IT equipment, IoT devices, operational technology systems, and mobile devices. Acceptable evidence would include an up-to-date asset management database or inventory spreadsheet showing all hardware assets with relevant attributes, screenshots of an asset management system, or documentation of the process used to maintain and update the hardware inventory.