Back

Record the operating system version for applicable assets in the asset inventory.


CONTROL ID
11748
CONTROL TYPE
Data and Information Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • An essential step in protecting your mobile device is to record identifying attributes of the device and its use. These attributes include but are not limited to the following: - Serial number (hardware and electronic should match) - Model number - Operating system, firmware, and payment-acceptance … (ΒΆ 5.6.1, PCI Mobile Payment Acceptance Security Guidelines for Merchants as End-Users, Version 1.1)
  • Types of software (including licensing details) to be recorded in an asset register should include Operating System software. (CF.03.04.03a-1, The Standard of Good Practice for Information Security)
  • Deploy software inventory tools throughout the organization covering each of the operating system types in use, including servers, workstations, and laptops. The software inventory system should track the version of the underlying operating system as well as the applications installed on it. The sof… (Control 2.3, The CIS Critical Security Controls for Effective Cyber Defense, Version 6.0)