{"id":3576,"date":"2024-08-22T10:15:47","date_gmt":"2024-08-22T10:15:47","guid":{"rendered":"https:\/\/www.netboss.nl\/services\/asset-tagging\/"},"modified":"2024-10-18T08:52:53","modified_gmt":"2024-10-18T08:52:53","slug":"asset-tagging","status":"publish","type":"page","link":"http:\/\/www.netboss.nl\/en\/services\/asset-tagging\/","title":{"rendered":"Asset-Tagging"},"content":{"rendered":"

Asset Tagging as a potential ‘Risk Mitigation Tool’<\/h1>\n

Before diving into the subject of \u2018Asset Tagging\u2019 and its purposes as a risk mitigation tool we first need to understand the broader context of potential business risks. Companies in general are consciously aware of the many internal and external threats they could encounter that could harm their business continuity.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

RISKS<\/h2>\n

The real question here is how many companies reviewed and assessed their potential risks and implemented the proper remediation plans and tools to address worst case scenario\u2019s. The figure below illustrates some of the internal and external factors that could impact business continuity.<\/p>\n<\/div>

INTERNAL RISKS | EXTERNAL RISKS<\/p>\n<\/div><\/div><\/div><\/div><\/div>

<\/span><\/div><\/div><\/div>

Structured Approach<\/h2>\n

We want to focus on both the internal and external technological risks from a cybersecurity perspective and how \u2018Asset Tagging\u2019 could support companies in better understanding their business process risks when exposed to exploitable cyber security vulnerabilities supporting these processes.<\/p>\n

Building a model to determine business process risks involves several steps, including identifying the core business processes, identifying potential risks, assessing their impact and likelihood, and implementing a monitoring and mitigation framework. Here\u2019s a structured approach to create this model.<\/p>\n<\/div>

Managed Service<\/span><\/a><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

With \u2018Asset Tagging\u2019 we only focus on the following steps that include:<\/h2>\n<\/div>
  • 1<\/span>
    \n

    Identify the core business processes and their owners<\/p>\n<\/div><\/li>

  • 2<\/span>
    \n

    Identify the core business process flows for each core business process<\/p>\n<\/div><\/li>

  • 3<\/span>
    \n

    Identify all IT, OT & IoT assets supporting these business process flows<\/p>\n<\/div><\/li>

  • 4<\/span>
    \n

    Identify per asset in these flows their potential risk based on the combination of probability & impact (rating Low-0 to High-5).<\/p>\n<\/div><\/li>

  • 5<\/span>
    \n

    Configure your ASM platform leveraging the asset risks ratings to build your reporting dashboards and to prioritize your patch management tools<\/p>\n<\/div><\/li>

  • 6<\/span>
    \n

    Regularly review your core processes and their supporting IT, OT & IoT assets<\/p>\n<\/div><\/li><\/ul>

    So \u2018Asset Tagging\u2019 is a process to identify for each core business process flow the supporting IT, OT and IoT assets and the overall business process owner(s) (no RACI matrix needed). Each supporting assets risk can then be rated (0 to 5) based on the impact and likelihood ratings (both also 0 to 5). The combined score works through the whole sequence of the business process flows. The figure below illustrates the basic concept.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

    <\/span><\/div>
    \n

    RISK IDENTIFICATION<\/h4>\n<\/div>\n

    Process\u00a0\u00a0<\/strong>Procurement<\/p>\n

    Risk<\/strong>\u00a0Supplier Failure<\/p>\n

    Category<\/strong>\u00a0Operational<\/p>\n<\/div><\/div><\/div>

    <\/span><\/div>
    \n

    RISK ASSESMENT<\/h4>\n<\/div>\n

    Impact\u00a0<\/strong>4 (high)<\/p>\n

    Likelyhood\u00a0<\/b>3 (mid)<\/p>\n

    Priority\u00a0<\/b>High<\/p>\n<\/div><\/div><\/div>

    <\/span><\/div>
    \n

    MITIGATION<\/h4>\n<\/div>\n

    Priotorise\u00a0<\/strong>Procurement<\/p>\n

    Consent\u00a0<\/b>Supplier Failure<\/p>\n

    Ececute\u00a0<\/b>Operational<\/p>\n<\/div><\/div><\/div>

    <\/span><\/div>
    \n

    MONITORING<\/h4>\n<\/div>\n

    Vulnerabilities\u00a0<\/strong>Exploitable on key assets<\/p>\n

    Frequency <\/strong>Monthly<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

    The figure below illustrates the overall mechanism to inform board members about potential cyber security vulnerabilities that could potentially impact their business process continuity.<\/p>\n<\/div>

    \"Netboss_Internal_Risks_versus_External_Risks_mapping\"<\/div><\/div>

    Asset Tagging is not only a mechanism to inform board members about potential business processes at risk or to enrich the CISO from a SoC perspective \u2013 it is really a mechanism to start automating the remediating actions on exposed key asset vulnerabilities to mitigate the overall impact on their business continuity. Asset Tagging helps companies to better understand their business process risks in real-time.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"parent":1624,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"footnotes":""},"class_list":["post-3576","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/pages\/3576","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/comments?post=3576"}],"version-history":[{"count":15,"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/pages\/3576\/revisions"}],"predecessor-version":[{"id":3853,"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/pages\/3576\/revisions\/3853"}],"up":[{"embeddable":true,"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/pages\/1624"}],"wp:attachment":[{"href":"http:\/\/www.netboss.nl\/en\/wp-json\/wp\/v2\/media?parent=3576"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}