IT-12 – System Inventory

Estimated reading: 2 minutes 1205 views

What is IT-12 – System Inventory Control?

For IT-12 system inventory control, it is recommended that you frequently perform a system inventory to detect any unauthorized or non-monitored systems.

Available tools in the marketplace

System Inventory Tools
No tool recommendation is made for this section

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

Control implementation

NOTE: This control is 100% automated by TrustCloud. Connect your system to enjoy the benefits of automation.

To implement this control manually,

Take an inventory of all systems, including all tools, whether critical or non-critical. Ensure that you review this list periodically (you can define how often you need to review it).

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

  1. System inventory is produced automatically by TrustCloud. If it is done manually, upload the latest inventory.

Evidence example

For the suggested action, an example is provided below:

  1. System inventory is produced automatically by TrustCloud. Ensure that the ‘System Inventory’ list is complete.
    The following screenshot shows where you can find the ‘Systems’ list.
    IT 12 System Inventory 01

Join the conversation