Asset, Change, and Configuration Management

• What is an asset? What is an important asset? What keeps your business going?

• Asset tagging

  • Internal ID for each devices

  • Barcode, QR, RFID, simple number, etc

  • Use some dedicated software (not Excel)

  • Why?

    • Inventory and Security

    • Warranty and Service

    • Daily Operations

  • Reftab – Asset tracking software

  • Software assets as well

• Change management

  • Every company: “we need to change this!”

  • Also every company: “…but without breaking stuff that works!”

  • Reactive or proactive

  • Standard process for MACs (Moves, Adds, Changes)

  • RFC (Request for Change)

• Risks of Change

  • Downtime

  • Degraded functionality

  • Increased attack surface

  • Planning vs reactive change

  • Rollback procedure

  • Test group / sandbox

• Configuration Management

  • OS settings, installed apps, and their configs

  • Baseline

  • Versioning

  • Dedicated software