Back

Record the operating system type for applicable assets in the asset inventory.


CONTROL ID
06633
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Types of software (including licensing details) to be recorded in an asset register should include Operating System software. (CF.03.04.03a-1, The Standard of Good Practice for Information Security, 2013)
  • Deploy software inventory tools throughout the organization covering each of the operating system types in use, including servers, workstations, and laptops. The software inventory system should track the version of the underlying operating system as well as the applications installed on it. The sof… (Control 2.3, The CIS Critical Security Controls for Effective Cyber Defense, Version 6.0)
  • Does the inventory system contain a field for the Operating System? (ยง D.1.1.2, Shared Assessments Standardized Information Gathering Questionnaire - D. Asset Management, 7.0)