bristy512
Do³±czy³: 28 Pa¼ 2024
Posty: 1
|
|
 Asset Inventory with R-Vision |
 |
If people are the foundation, then asset management is the "cement" in the wall called "information security". It is the asset management process that is the connecting link and the starting point for other information security (IS) processes. Therefore, I highlight two key requirements for the asset register, without which this wall will not be strong and reliable enough - relevance and completeness of information.
As an information security specialist, I understand the term "asset management" as a systematic process that includes constant monitoring, accounting, and recording of all key changes website development service throughout the entire life cycle of an asset - from creation to decommissioning. The result of this process is the formation of an asset register.
The R-Vision system handles the inventory task through a separate functional block for asset management. R-Vision has a list of pre-configured asset types that can be divided into two groups.
For all these asset types, connections are drawn, i.e. we will be able to find out in which network this or that equipment is located, what software (SW) is installed and what information is processed on this equipment, who and with what privileges has access to the equipment (user accounts), etc. For more convenient work with assets, R-Vision allows you to combine individual equipment instances into groups of IT assets that need to be separately monitored from an information security point of view. They, in turn, are linked to other asset types available in R-Vision. In addition, you can add custom asset types and specify connections.
For each type of asset, an asset card is defined - a set of fields with information about the asset. For example, for an asset, you can specify the owner, select which of the classes of typical information systems (according to the Order of the Operational and Analytical Center under the President of the Republic of Belarus No. 66 of 20.02.2020) this asset belongs to, or select an asset category (critical information object, automated process control system, information system processing personal data, etc.).
The first method is implemented by entering the necessary data into R-Vision to perform inventory (accounts) and configure target inventory systems (open the necessary ports, provide access, etc.). For each asset, R-Vision collects the following main parameters: network interfaces, operating systems (OS), name, list of installed software, list of installed updates for Windows OS, list of users who successfully logged into the system. R-Vision also provides information on whether the following security parameters are enabled or disabled.
The second method is implemented by integrating R-Vision and external systems to import asset information. The list of supported external systems is quite large and is constantly being expanded - these are antiviruses, vulnerability scanners, DLP and many others. For each integration option, you can configure the volume of imported information. For example, by integrating with Active Directory, you can fill R-Vision with information about the organization's personnel and structural divisions.The third method is implemented by filling in an Excel template with information about assets and importing it into R-Vision, where all this information is distributed across the required fields.The fourth method involves a combination of the three previous ones in any variations.
Another important feature of R-Vision is the ability to collect information about assets in geographically distributed organizations. Due to the implementation of the role-based access model, information about assets from all branches (with division and binding to a specific branch) will flow into the Central Office (Central Office). At the same time, branches will also have information about their assets, but will not be able to see information about the assets of other branches.
After a successful inventory, R-Vision will allow you to implement the vulnerability management process. Vulnerability information flows into R-Vision through integration with external systems (e.g. vulnerability scanners). The vulnerability card displays key information about a specific vulnerability, a link to assets where vulnerabilities were detected, information about vulnerable software and other related vulnerabilities. R-Vision has an option to calculate a vulnerability rating based on the CVSS assessment and asset and vulnerability field values; the rating calculation logic is set by the user.
In practice, I have encountered the fact that some organizations consistently analyze network segments using a vulnerability scanner. This leads to the fact that after each scan, the collected information on vulnerabilities must be deleted before scanning the next segment of the IT infrastructure. Of course, this problem can be solved by generating and storing reports, but this method is not optimal, since some information is still lost. R-Vision solves this problem and allows you to store all information on vulnerabilities in a single system and use it in further work.
R-Vision has a separate functional block for document management. This block allows you to manage the entire document flow of the organization in terms of information security in the system. For example, in R-Vision you can load the “Regulations for working with removable media”, assign a person responsible for the document, control the application and deadlines for reviewing the document in the organization.
The R-Vision functional block for task management allows you to assign tasks to specific individuals, monitor deadlines and the status of task completion (with the ability to attach evidence of their completion).R-Vision also has a separate functional block for visualization and reporting. It has both “boxed” charts and reports, as well as chart and report designers. For example, you can load a floor plan of a building and place assets located on it, display a pie chart with statistics on operating systems, generate a detailed report on a host, display statistics on tasks in a report, etc.
_________________
website development service |
|
