Using inventory systems

Abstract

This article examines the problem of the non-universal use of various types of inventory systems within the boundaries of the Organization’s information infrastructure, and also emphasizes the fact of the effectiveness of the inventory approach to control activities in the process of managing information assets. The topic of possession of incomplete information about the Organization's infrastructure, the constituent elements of the information security system, and application software without the use of inventory systems by specialists from information technology departments was raised. A classification of various inventory systems that are widely used in the Russian Federation has been carried out. The authors provide an example of an inventory result that is as close as possible to optimal conditions for the user because covers various levels of information infrastructure (system, network) and also, in addition, reflects the information protection means of various classes operating at inventory objects. An important addition is the reflection in the example of the results of an inventory of the information transfer protocols used, since when analyzing such data, an experienced employee will be able to draw a conclusion about the technologies used in a particular case. The article provides examples of tools used to implement a system of control procedures and analyze inventory results.