Large financial services organizations employ tens or hundreds of thousands of individuals. At this scale, the technology base required to ensure smooth business operations (including computers, mobile devices, operating systems, applications, data, and network resources) is massive. To effectively manage, use, and secure each of those assets, you need to know their locations and functions. While physical assets can be labeled with bar codes and tracked in a database, this approach does not answer questions such as “What operating systems are our laptops running?” and “Which devices are vulnerable to the latest threat?”
Computer security professionals in the financial services sector told us they are challenged by the vast diversity of hardware and software they attempt to track, and by a lack of centralized control: A large financial services organization can include subsidiaries, branches, third-party partners, contractors, as well as temporary workers and guests. This complexity makes it difficult to assess vulnerabilities or to respond quickly to threats, and to accurately assess risk in the first place (by pinpointing the most business essential assets).

| Format: |
|
| Topics: | |
| Website: | Visit Publisher Website |
| Author(s): |
|
| Publisher: | National Institute of Standards and Technology (NIST) |
| Published: | September 1, 2018 |
| License: | Copyrighted |
| Copyright: | © National Institute of Standards and Technology U.S Department of Commerce |
| Tags: | computingdatainformation technology (it)mobile deviceoperating system |