Build an asset inventory
Record every device and important account you own, with owner, classification and support status. Then find the ones that are end-of-life.
Environment
A spreadsheet. Optionally your router's admin page, to list connected devices.
Before you start
- Read Asset Tracking (p.180), Asset Protection Concepts (p.182) and Secure Data Destruction (p.188).
You will
- Create an inventory with key attributes
- Spot unsupported or unpatched assets
- Plan secure disposal
Steps
-
1
List every device: phones, laptops, tablets, router, smart TV, IoT gadgets. Your router's 'connected devices' page helps you find ones you forgot.
-
2
For each, record: owner, model, OS or firmware version, last update, where it's kept, and what data it holds.
-
3
Classify the data each one holds (public, private, sensitive).
-
4
Look up whether each model still gets updates, and flag any that are end-of-life.
-
5
For one device you'd retire, write how you'd securely wipe or destroy its storage.
-
6
Save the sheet and set a reminder to review it every quarter.
Check your understanding
- ?Why can't you protect assets you don't know about?
- ?What risk does an end-of-life IoT device add, and what compensating control could you use?
- ?What's the difference between clearing and destroying storage media?