1. Asset Management

1.1 Information System Component Inventory Policy

Purpose and Overview

The purpose of this policy is to establish and maintain an enterprise-wide inventory of Paladin information systems.

Scope

This policy applies to all information systems owned or operated by Paladin which may store or process customer data. The policy shall apply to all Paladin employees and contract personnel.

Policy

Paladin develops, documents, updates and maintains an inventory of information system components that:

• Accurately reflects the current information system
• Includes all components within the authorization boundary of the information system
• Is at the level of granularity deemed necessary for tracking and reporting

Systems Component Inventory Requirements

• Verify that all components within the authorization boundary of the information system are not duplicated in other information system component inventories.
• Include at least the following details for effective tracking and reporting:
  • hardware inventory specifications (manufacturer, type, model, serial number)
  • information system / component owner(s)
  • associated component configuration standard
  • software/firmware version information
  • the machine name and network address (for a networked component/device)