9.1: Associate Active Ports, Services, and Protocols to Asset Inventory

Associate active ports, services, and protocols to the hardware assets in the asset inventory.

Asset Type

Security Function

Implementation Groups

Devices

Identify

2, 3

Dependencies

  • Sub-control 1.4: Maintain Detailed Asset Inventory

  • Sub-control 1.5: Maintain Asset Inventory Information

Inputs

  1. The list of endpoints

Operations

  1. For each endpoint, identify necessary detailed information
    1. Active ports

      1. Protocol Served

    2. Installed services (running or not)

  2. Identify endpoints with all detailed information identified

Measures

  • M1 = Count of endpoints in inventory

  • M2 = Count of endpoints with all detailed information

  • M3 = List of endpoints with all detailed information

  • M4 = List of endpoints missing at least one piece of detailed information

  • M5 = Count of endpoints missing at least one piece of detailed information

Metrics

Quality

Metric
The ratio of endpoints with all detailed information to the total number of endpoints
under management.

Calculation

M2 / M1