Cyberstudy
PDF p.182 In progress

Asset Protection Concepts

Open PDF at p.182 20 flashcards

Summary

PDF p.182

Asset protection in cybersecurity involves safeguarding critical resources, information, and infrastructure from threats and unauthorized access. This ensures the integrity, confidentiality, and availability of an organization's information systems.

In plain words

Supplementary — not from your PDF

Protect assets by identifying them clearly (barcodes or RFID tags, standard naming conventions) and keeping them in an approved configuration. Configuration management, often done with ITIL, uses configuration items (CIs), baseline configurations and a configuration management system, with change control so changes don't cause outages or open security holes.

Detailed explanation

PDF p.182
  • Asset Definition
    • Scope: Includes hardware devices, software applications, data repositories, network components, and more.
    • Importance: Protecting these assets is crucial for maintaining system integrity, confidentiality, and availability.
  • Asset Identification and Standard Naming Conventions
    • Identification Methods: Use barcode labels or RFID tags for tangible assets.
    • RFID Tags: Chips programmed with asset data that signal scanners to update location information.
    • Naming Conventions: Standardized naming for hardware and digital assets (accounts, virtual machines) to ensure consistency.
    • Configuration Management Database (CMDB): Stores asset information, including location and function.
  • Configuration Management
    • Purpose: Ensures assets adhere to approved configurations.
    • Change Control: Reduces risk of operational interruptions due to changes.
    • ITIL Framework: Implements configuration management using service assets, configuration items (CIs), baseline configurations, and a configuration management system (CMS).
  • ITIL Elements
    • Service Assets: Things, processes, or people contributing to IT service delivery.
    • Configuration Items (CIs): Assets requiring specific management procedures.
    • Baseline Configuration: List of settings an asset must adhere to for security.
    • Configuration Management System (CMS): Tools and databases for managing CIs.
    • Diagrams: Illustrate relationships between network elements and business workflows.

Important terms

taken from the text above
Identification Methods
Use barcode labels or RFID tags for tangible assets.
RFID Tags
Chips programmed with asset data that signal scanners to update location information.
Naming Conventions
Standardized naming for hardware and digital assets (accounts, virtual machines) to ensure consistency.
Configuration Management Database (CMDB)
Stores asset information, including location and function.
Change Control
Reduces risk of operational interruptions due to changes.
ITIL Framework
Implements configuration management using service assets, configuration items (CIs), baseline configurations, and a configuration management system (CMS).
Service Assets
Things, processes, or people contributing to IT service delivery.
Configuration Items (CIs)
Assets requiring specific management procedures.
Baseline Configuration
List of settings an asset must adhere to for security.
Configuration Management System (CMS)
Tools and databases for managing CIs.
Diagrams
Illustrate relationships between network elements and business workflows.
CMDB Configuration Management Database CIs Configuration Items CMS Configuration Management System

Examples & real-world scenarios

Supplementary — not from your PDF
  • Naming servers by site-role-number, e.g., LON-DB-01.
  • A baseline listing required security settings for all laptops.
  • RFID tags updating an asset's location automatically.

Scenario

An admin changes a firewall setting directly in production, and a business application breaks. Change control would have required review, testing and a rollback plan first.

Common mistakes

Supplementary — not from your PDF
  • Mixing up a baseline (the required settings) and a CI (the managed asset).
  • Allowing undocumented changes that drift away from the baseline.

Practical skills

Supplementary — not from your PDF
  • Write a simple baseline configuration for one system type.

What I should remember

Key Points PDF p.182
  • Asset Definition
    • Critical Resources: Hardware, software, data, network components.
    • Protection: Ensures integrity, confidentiality, availability.
  • Asset Identification and Naming
    • Methods: Barcode labels, RFID tags.
    • Consistency: Standard naming conventions.
    • CMDB: Stores asset information.
  • Configuration Management
    • Adherence: Approved configurations.
    • Change Control: Minimizes operational risks.
    • ITIL Framework: Service assets, CIs, baseline configurations, CMS.
  • ITIL Elements
    • Service Assets: Contribute to IT services.
    • CIs: Require management procedures.
    • Baseline Configuration: Security settings.
    • CMS: Manages CIs.
    • Diagrams: Show network relationships.