Inventory Form
The inventory form is based off Fedramp's requirements. All
displayed fields come direction from their handbook. All non-displayed
fields, are just additional information you may wish to fill out inside
the asset.
The asset identifier is used
through NUDG to cross link (weaknesses for example). Asset identifiers
MUST be unique and consistent, as it's not only required by CMMC/NIST,
but it keeps links active throughout the system once they are tied
together.
The Inventory system is mainly for
tracking asset identifiers if you choose to do mapping. For the fields
that offer mapping, if you wish not to use our inventory tracker, there
are comment boxes where you can simply input whatever you want for the
asset identifier. We do not recommend the inventory form to replace an
active inventory scanner (ie: Lansweeper, Connectwise, Manageengine,
etc). It will work fine for a smaller company that doesn't have
constant change of inventory, or if you do one initial import and simply
add as needed. The most important part is when created weaknesses, you
identify if an asset is involved.
You may
manually fill out your assets, or import them via CSV/EXCEL by matching
the fields from your inventory scanner on upload. One or the other. If
you manually add assets be sure to given them an identifier that allows
you to keep track of them later in case you decide to import as you'll
want to save those manual entries prior to importing. Importing does
NOT overwrite, so be careful to not duplicate entries via multiple
imports.
Example fill:
IMPORTING
If you wish to import a list of assets, you may do so by selecting the upper right 3 bar drop down, and selecting Import Data.
Be
aware that if you have to import again, you will need to clear this
form entirely or you may end up with duplicate entries. Each import is
treated unique. To completely remove your current inventory prior to a
clean import, in LIST view, select the top left checkbox to select all.
Be sure to go through and DESELECT your manual entries if you have any,
and then import again:
You may also export your manual entries first, and then re-import them after updating your inventory.
In this example, we'll be using a CSV file that was recently exported from lansweeper.
You
will need to match your fields as all inventory scanners exports are
unique. It's helpful to have the CSV open to view how your inventory
system identifies each field. The top bar is the imported data's
fields. The drop down is where you will select which NUDG field it
applies to.
AssetName in this case will be
the Asset Identifier, and AssetType matches AssetType, so we will match
it up see below before importing.
We selected a few fields just to get them into the system as you can see below after clicking import:
Since
inventories can be large, a fast method of adding some of the more
specific fields (auth scan, public, virtual, etc) is to click the 3 bars
again, and switch to spreadsheet view. Which will provide you with all
the drop down fields to quickly make changes. See below:
Be sure to select the SAVE icon at the top left if you use this view to save your changes before moving on
Related Articles
Vendors, Suppliers & CUI Contracts
Vendors, Supplies, & CUI Contracts, similar to Inventory, an optional section of NUDG if you wish to keep track if your company relationships. We've provided the form fields for that purpose, but it's optional on whether you want to use it or not. ...Basic Troubleshooting & System Status
NUDG has just recently been completely redesigned in this release, and we have been working diligently to migrate legacy data over to the new system. Given that NUDG is also in active development, you may experience hiccups along the way. Please do ...Resources and Incident Response
Resources and Incident Response reports. Resources are simply a place to upload specific documentation you need to reference easily. Think, Visio diagrams, Acceptable Usage Policies, Cyber Security Training, Backup Reports. Pretty much anything you ...NUDG Introduction
Welcome to NUDG Systems. This guide is meant to give you a brief overview of how we recommend starting your journey on cyber security compliance. While there's no right order to manage things, setting up the foundation correctly at the beginning can ...Users, Groups, & Roles
Users, Groups, & Roles, similar to Inventory and Partners, are optional but available in the system. You should be familiar with users and groups if you've ever worked with Active Directory. They are the most important part of your infrastructure ...