What to do: Appoint a senior executive to undertake the inventory count. Physically count and list/map all cyber assets connected to the corporate IT network. This includes hardware, such as PCs, laptops, printers, modems and network routers. All purchased programs, such as Word, Excel and other professional software like accounting, video editing and programming tools, must also be listed. Update the list/map every quarter to ensure that new devices and software are included. m n 1%) m Pd = Bod = BR Include the device name like Dell XPS 15 laptop and the updated version ID of each software update such as macOS Sierra Version 10.12.6. This detailed asset information will aid subsequent work like patching. If you want to do more: Install and run software to automatically check that only authorised organisational assets are allowed to connect into the organisation’s network (otherwise, an alarm is triggered to IT and security managers for example). This software could also help manage the organisation’s inventory list/map. Connect the dots. Draw and maintain an architecture diagram (map) to see the internal and external connections made by assets from the organisation's network. Good rules to follow: For work, use only devices (including thumb drives, portable hard disks, and other removable media) issued by your organisation. Such devices are to be included in the organisation’s inventory list/map. Ports, devices, and software that are no longer in use must be disconnected from the organisation’s network.