jperezduerto.info
Security in depth · Unit 18 · Lesson 1 of 8
Inventory starts with a decision
Choose inventory fields that let a responsible team make a maintenance decision.
Helpful before thisReconnaissance: building an evidence-based map
After this lesson you can
- Identify the missing fields that prevent an inventory entry from supporting a specific decision.
One idea. One situation. One reasoned decision.
How it works
An asset inventory connects a system to its purpose, owner, data, exposure, and support status. A list of addresses answers only part of that question. Decide what action the inventory should support, such as patch ownership or recovery order, and collect the fields needed for that decision. Avoid treating an impressive item count as evidence of useful coverage.
Read the supplied record
A fictional museum must route a vendor maintenance advisory to the right owners. Its inventory contains:
| Asset | Confirmed purpose and owner | Maintenance evidence |
|---|---|---|
| A | Public events site; web team | Installed release and agreed window recorded |
| B | Booking service; owner unknown | Release and window unknown |
The immediate decision is who will assess applicability and approve service disruption. A can be routed to its recorded owner. B needs an accountable follow-up through the service coordinator, who can resolve ownership and request the missing release and scheduling information. Unknown fields should remain visibly unknown until supported.
Adding more addresses would not make B ready for this decision. Nor should B be ignored because its row is incomplete: bookings may be important to the museum. Record the evidence source and review date so the next reviewer knows how current each field is. This exercise does not establish which asset is vulnerable or which update should be installed; those are later decisions supported by the completed context.
The key distinction: People need enough context to act on an entry.
Check yourself
No timer. No penalties. Read the explanation and try again whenever you like.
This lesson’s questions have changed. Your reading progress is saved; review the updated questions.
-
What best improves B’s entry for the stated maintenance decision?
Show the answer
Correct answer: Assign an accountable follow-up to confirm ownership, installed release, and a suitable service window. Those missing facts determine who evaluates the advisory and how a safe maintenance decision is made.
Try it
- WriteWrite an action-ready entry for B using known facts and explicit unknowns. Name who should resolve each missing field without inventing an owner or maintenance window.