ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
A rapidly growing tech startup has numerous cloud-based applications and services. They notice that tracking software licenses, hardware warranties, and cloud subscription renewals has become chaotic, leading to unexpected costs and potential compliance issues. Which security operations practice should they prioritize to regain control and visibility over their IT environment?
- AConfiguration management
- BSecurity monitoring
- CAsset management
- DChange management
Show answer & explanationAnswer & explanation
Correct answer: C. Asset management
Asset management is the systematic process of tracking and managing the lifecycle of an organization's assets, including hardware, software, and cloud services. It provides the necessary visibility and control to manage licenses, warranties, and renewals, directly addressing the described chaos.
Why the other options are wrong
- A. Configuration management ensures systems are set up consistently, but doesn't primarily track inventory or financial aspects.
- B. Security monitoring focuses on detecting threats and incidents, not the administrative tracking of assets.
- D. Change management controls modifications to systems, not the inventory or lifecycle of the assets themselves.
Asset Management
The systematic process of tracking, managing, and optimizing the lifecycle of an organization's IT assets, including hardware, software, and cloud services.
- Provides visibility into all IT assets.
- Helps manage licenses, warranties, and renewals.
- Supports compliance, cost optimization, and security.
Memory trick: Knowing what you have is the first step to managing it.