Cyber & IT Supervisory Forum - November 2023

Internal Use Only

Why a Complete Asset Inventory Matters

9

9

Internal Use Only

Example Risk Assessment Asset Inventories

Asset/Technology Grouping

Amt of Data residing on asset

Application System

110,000 customer records

Core server

All customers

Filing cabinet (locked) Filing cabinet (not secured) Network file shares

23,000 customer records 200 customer records 2,000,000 files – customer & internal files

Business Applications System name System name System name

GLBA Sensitive PublicPrivate Server Name

Description Correspondent Banking, borrowings Incoming/outgoin g wires

Business Unit Owner

Treasury

Vendor web address Vendor web address Vendor web address Internal server name

X

Treasury/Customer Service Operations

X

Hosted Core Processing Services Email server

Core

X X

Microsoft Exchange

Network

10

10