6 Essential Cybersecurity Questions

And 2 bonus questions

Understanding your organization's assets is a first step toward improving your cybersecurity posture. Here are 6 questions to ask--and understand--about your organization's assets:

1. Is the asset known and managed? Is it in your asset inventory?

2. Where is it? Do you know where it is geographically?

3. What is it? Do you know what kind of device it is?

4. Is its core software up-to-date?

5. What additional software is installed?

6. Does the asset adhere to your policies?

The good news is that Epiphany answers many of these questions as it analyzes your attack surface and can save you much time tracking down these details. As you read the other sections in this guide, you'll see how Epiphany helps with this.

Here are some additional "bonus" questions to give you even more information to ensure you're on top of your asset inventory:

1. Why do you need the asset? How does it tie into your business operations? Sometimes it's good to get rid of legacy assets and data that can become a liability. Just imagine if your company previously collected social security numbers but no longer needs to collect or store that data.

2. Who manages the asset and do you have their contact information? This is especially important in geographically-dispersed organizations.