Asset & risk management depth — found from sitemap — Drata

Cited by

Facts read from this source

• Policy template asset management Report an error

  “The following article contains guidance explaining portions of the Asset Management Policy that we frequently see questions around, explaining what the sections mean.”

• Asset page notes column Report an error

  “[Classification of the asset or the data processed by the asset can be listed within the Notes column of Drata’s Asset page.]”

• Physical asset inventory integration Report an error

  “[COMPANY NAME] leverages a SaaS-based asset management system, Drata, to maintain inventory of all company-owned physical computing equipment”

• Digital asset inventory automation Report an error

  “[COMPANY NAME] uses Drata’s automated system to query across our cloud-based infrastructure to obtain detailed records of all digital assets”

• Digital assets tracked Report an error

  “Virtual machines Virtual servers Virtual repositories Security agents Source code repositories User accounts”

• Records kept current via drata Report an error

  “All records are kept up to date through automation via Drata.”

• Policy roles guidance Report an error

  “[Please see here for more guidance on roles and responsibilities: https://help.drata.com/en/articles/5829670-roles-and-responsibilities-guidance.”

• Template customizable Report an error

  “[If you use a system that is not Drata, you should adjust this section to mention the name of the asset management system you are using.]”

• Nist csf external assets optional Report an error

  “[In the last sentence of the section above. The inclusion of "external assets" is specific to NIST CSF requirements and currently OPTIONAL for other frameworks.]”

• Media sanitization nist only Report an error

  “[This section is specifically for NIST SP 800-53]”

• Cis benchmarks reference Report an error

  “Center for Internet Security (CIS) benchmarks are utilized where possible for system hardening guidance.”

• Policy supported topics Report an error

  “Asset Retirement Standard System Hardening Standards Capacity Management Management of Media”

Scores citing this record

• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The CISO Asset & risk management depth
• The CISO Integrations & automation
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant Asset & risk management depth
• The GRC Consultant Integrations & automation
• The GRC Consultant European sovereignty
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Evidence Integrator Asset & risk management depth
• The Evidence Integrator Integrations & automation
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Integrations & automation
• The Drafted IT Officer Asset & risk management depth
• The Drafted IT Officer Integrations & automation
• The Lead Auditor Asset & risk management depth
• The Lead Auditor Integrations & automation
• The Lead Auditor Asset & risk management depth
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Skeptic Asset & risk management depth
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Asset & risk management depth
• The Skeptic Integrations & automation