IT-12 – System Inventory

What is IT-12 – System Inventory Control?

For IT-12 system inventory control, it is recommended that you frequently perform a system inventory to detect any unauthorized or non-monitored systems.

Available tools in the marketplace

System Inventory Tools

No tool recommendation is made for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• System inventory examples from NIST (National Institute of Standards and Technology)

Control implementation

NOTE: This control is 100% automated by TrustCloud. Connect your system to enjoy the benefits of automation.

To implement this control manually,

Take an inventory of all systems, including all tools, whether critical or non-critical. Ensure that you review this list periodically (you can define how often you need to review it).

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. System inventory is produced automatically by TrustCloud. If it is done manually, upload the latest inventory.

Evidence example

For the suggested action, an example is provided below:

1. System inventory is produced automatically by TrustCloud. Ensure that the ‘System Inventory’ list is complete.
   The following screenshot shows where you can find the ‘Systems’ list.