Educause Security Discussion mailing list archives
Re: Inventory Benchmark
From: "Corn, Michael" <mcorn () UCSD EDU>
Date: Tue, 25 Jul 2017 15:55:09 +0000
I've always found it helpful to leverage network data to estimate the actual number of machines on your network. The error bars may be a tad large, but it gives you something to gut check the kinds of actual counts you get from endpoint systems. Ultimately you can measure progress as the reduction between endpoint counts and your network based estimate. Again, with a grain of salt, but something I've always found helpful. MC ---------------------- Michael Corn | Chief Information Security Officer mcorn () ucsd edu University of California San Diego | ITS - Information Technology Services 10280 N. Torrey Pines Road, Suite 255 | La Jolla CA 92093 MC 0928 ________________________________________ From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Barton, Robert W. <bartonrt () LEWISU EDU> Sent: Tuesday, July 25, 2017 7:29:10 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Inventory Benchmark Morning, In trying to evaluate our inventory process; I’m trying to figure out a good benchmark for our inventory percent managed/known. I would like to say, that at any given time, we only have X% of unknown hardware. So, if you asked on Tuesday, I could say we only have 115 machines unaccounted for in Symantec because they are off site, down, or otherwise non-communicating (115 = 5%). That unknown number would need to included inventory issues/errors, non-reporting machines (off site, or down), and machines not controlled yet. 10% to high? 5% to strict? Robert W. Barton Director of Information Security Lewis University One University Parkway Romeoville, IL 60446-2200 815-836-5663 This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone at (815)-836-5950 and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.
Current thread:
- Inventory Benchmark Barton, Robert W. (Jul 25)
- Re: Inventory Benchmark Frank Barton (Jul 25)
- Re: Inventory Benchmark Corn, Michael (Jul 25)
- <Possible follow-ups>
- Re: Inventory Benchmark Brad Judy (Jul 25)
- Re: Inventory Benchmark Barton, Robert W. (Jul 25)