Asset Inventory and Exposure Review from Your Own Records
<p>You cannot protect what you do not know you have. At a fictional branch of Konkan Port Logistics, three records disagree: the CMDB (what IT thinks it owns), the DHCP server's leases (what is actually on the network) and the branch firewall's rule export (what the internet can reach).</p><p>In three lessons you learn why asset inventory is control number one in every framework (CIS Control 1, ISO 27001 A.5.9, NIST CSF ID.AM), how to reconcile records with lookups and COUNTIFS in Excel to find unmanaged devices and unowned assets, how to read firewall rules to see which internal services the internet can reach, and how to turn that into an exposure summary a branch IT lead can act on.</p><p>Everything comes from the organisation's own records, generated for you; no scanning is involved. You work in Bartman's in-browser Excel lab and Word lab. Part of the Bartman Cybersecurity track (Professional Certificate in Cybersecurity, LSBF).</p>
Tools: Asset management, Excel, XLOOKUP, Firewall rules, CMDB, Exposure management