CIS Control 1 Safeguards for knowing every device connected to the enterprise: the detailed asset inventory, handling unauthorized assets, and active, DHCP-based and passive discovery.
The foundation of CIS Control 1: a complete, current record of every enterprise asset that can store or process data, the fields each record needs, how often it is reviewed, and how the CIS assessment specification scores accuracy and completeness.
The response half of asset control: a weekly process for dealing with devices that are not in the approved inventory, the options CIS allows (removal, blocking remote connection, quarantine) and how assessors confirm flagged assets are gone.
Automated, active scanning that finds assets connected to the network at least daily: an IG2 Safeguard that feeds the inventory in Safeguard 1.1 and is measured by discovery coverage and tool configuration.
Using DHCP server or IP address management logs as a feed for the asset inventory, reviewed at least weekly: how it complements active and passive discovery and what assessors check on DHCP servers and the CMDB.
Passive network discovery that identifies connected assets from observed traffic, with results used at least weekly to update the inventory: the only IG3 Safeguard in Control 1.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.